User Guide

Grant Access Settings

These settings govern the provisioning of a temporary administrator with a common password across a range of machines.

Setting / Description	Default Value
Allow Grant Access password retrieval through Password Vault and Remote Terminal?	NO
If enabled Password Vault and Remote Terminal users can retrieve the password.
Database polling interval for Grant Access requests (minutes)	10
How often to check for Grant access jobs to run
Display password on Grant Access page	YES
If enabled the password is displayed on the Grant Access page
Maximum default rows selecting targets	50
This is the default maximum targets a user can select into the list of Grant access targets
Maximum rows allowed selecting targets	5000
This setting prevents user from selecting more than 5000 targets into the list of Grant access targets
The account lifetime (Days)	7
How long before the account is deleted
The account name	fsadmin
The Grant Access account name
The account name cannot be changed	YES
If enabled the Grant Access account name is fixed and cannot be altered by Grant Access users.
The UNIX account group membership (user, sys, root)	Root
The Grant Access account local UNIX group membership.
The UNIX account shell	/bin/sh
The Grant Access account local UNIX default shell
The Windows account group membership	Administrators
The Grant Access account local windows group membership. Multiple group memberships are comma delimited, e.g.: Performance Log Users, HelpServicesGroup

*3 Groups comma delimited: Administrators,NOCHECK,Print_special