search cancel

Super user query

book

Article ID: 215500

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

We have created another admin account called "super1" and grand the same access right as "super" (Copy of the super user account).  But we find that this "super1" account would be disabled due to inactive after 'N' days.
This setting is in the Global Settings. If we don't want to change this "Disable Inactive After (Days)" as it will apply on all accounts, please advise is there any way to prevent this "super1" account disable due to inactive?

Environment

Release : 3.3.x, 3.4.x

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

The out of the box account "super" is protected from being disabled in the code level itself. 

This user has the UserId =1 in the internal database and the internal queries have an exception for this UserID from being deactivated.

The built-in 'super' account can't even be deleted, but this can only be renamed.