You can set advanced security and maintenance settings for individual domains or domain sets. You can also set security and maintenance options globally to apply to all domains except where you have explicitly defined a domain-specific setting. If you use a combination of global and domain-specific settings, the domain‑specific settings take precedence over the global settings.
If you are not using global security settings or want to override global settings on specific domains, you can set the following advanced security and maintenance options on a case‑by-case basis:
- Set domain administrative accounts
- Enable automatic account maintenance using the administrative account
- Enable manual account unlock using the administrative account
- Allow multiple password checkouts
- Enable periodic password rotation
- Enable password rotation after checkin
- Minimum password age
- Password complexity profile
- Enable periodic password history cleanup
In addition, the Privileged Access Service periodically updates the “joined zone” status of systems in the domain. You can view and change the update interval for all systems in the domain using the following Domain/Zone Tasks:
To set domain-specific advanced options:
- In the Admin Portal, click Resources, then click Domains to display the list of domains.
- Select the domain to display the domain-specific details.
- Click Advanced.
- Select settings for any or all of the advanced domain options.
- Click Save.
For more information about how to set the domain-specific options, click the information icon in the Admin Portal.