How to disable deactivation of users due to a configured inactivity interval set via "Disable Inactive After (DAYS)" in global settings ?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

How to disable deactivation of users due to a configured inactivity interval  set via "Disable Inactive After (DAYS)" in global settings ?

Essentially, configure PAM to not deactivate users due to inactivity.

Environment

All Supported PAM releases

Resolution

In PAM UI please navigate to Settings==>Global Settings===>Accounts, and set "Disable Inactive After (DAYS)" to "0" (Zero) as shown below:

Additional Information

Note that changing this setting ("Disable Inactive After (DAYS)" to "0" does not re-enable users previously disabled due to inactivity and does not reset the last used account information. In addition, if you subsequently change the inactivity time from "0" to the original value, the user's original last login will still be evaluated and may lead to user marked in disabled state."