PAM settings (retention and per-connection approval)

PAM settings apply to the whole organization. They are under «PAM» › «PAM settings».

Which settings are there?

Choose «Save settings». «Settings saved.» appears.

With dual control on

Changing the settings waits for a second administrator: the change is sent for approval and a second administrator must approve it under PAM › Dual control. See Dual control.

Approval before each connection

The option exists in the console, but connect-time approvals are not served yet: a profile with «Ask for approval before each connection» refuses sessions. Keep it off until it is available.

How long should I keep recordings?

The period is your organization's decision (the data controller). Consider your sector's legal and audit obligations and use legal hold for specific cases. See Retention and legal hold.

Messages

A message that the vault is unavailable means the key service did not answer; try again shortly.