Password View Policy - Default Request Interval Query
Article ID: 378947
Updated On:
Products
Issue/Introduction
Is it possible to change the "Default Request Interval" while an active session is in place for a Target Device.
Background:
The enduser is working on some complex task and this task requires more time to complete than the time interval that is defined in the 'Default Request Interval' and the user wishes to extend the requested interval dymanically so that the active session is not lost, taking into consideration that the 'Connection Idle Timeout' and 'Maximum Connection Idle Timeout' are set to a higher value of 48 hours.
Environment
All supported versions of CA PAM
Cause
The 'Default Request Interval' is a fixed value and can't be modified on demand.
Resolution
The product is working as designed, the only option is to modify the PVP and modify the 'Default Request Interval' and this change will be effective only for the next successive request for the users. The users would have to logout and login again for the modified PVP setting to be in effect.
Additional Information
For more information on how to Configure Password View Policies That Require Approval of Requests look at the below documentation.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/4-2/protect-privileged-account-credentials/set-up-password-composition-and-view-policies/establish-password-view-policies/configure-password-view-policies-that-require-approval-of-requests.html
Feedback
