Prevent account disable due to inactive on new copied super user
search cancel

Prevent account disable due to inactive on new copied super user

book

Article ID: 215500

calendar_today

Updated On: 12-09-2024

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

After we created another admin account called "super1" and grant the same access right as "super" (Copy of the super user account).  But we find that this "super1" account would be disabled due to inactive after 'N' days.
This setting is in the Global Settings. If we don't want to change this "Disable Inactive After (Days)" as it will apply on all accounts, please advise is there any way to prevent this "super1" account disable due to inactive?

Environment

Release : All versions

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

The out of the box account "super" is protected from being disabled in the code level itself. 

This user has the UserId =1 in the internal database and the internal queries have an exception for this UserID from being deactivated.

The built-in 'super' account can't even be deleted, but this can only be renamed.