minute read
Global Parameters: Access
Aggregated Email Notifications
Enable to aggregate multiple email notifications to reduce mail traffic for mass notifications.
Alert Notification Attempts
The maximum number of notification delivery attempts for alerts.
Once this maximum number of attempts has been reached for an alert, the notification will no longer be processed.
Anonymous Links
The parameter enables the option to share sensitive information with anonymous users using uniquely generated links with expiration terms.
Generic option disables anonymous link sharing for records while allowing sharing messages on the user profile.
Create Audit Log for CAS Login Events
This parameter is responsible for creating an Audit Log for CAS login events.
Date Format
This parameter defines the date and time format that is used in PAM.
For example, the default value MM/dd/yyyy HH:mm:ss represents 10/25/2023 15:27:33 (October 25, 2023 at 3:27:33 PM).
Use the following example patterns to help construct your date and time format:
MM to represent the two digit numerical month of the year using a zero pad if needed.
dd to represent the two digit numerical day of the month using a zero pad if needed.
yyyy to represent the four digit calendar year.
HH to represent the two digit hour of the day in a 24-hour cycle using a zero pad if needed.
mm to represent the two digit minute of the hour using a zero pad if needed.
ss to represent the two digit second of the minute using a zero pad if needed.
Delegation of User Management
This parameter enables folder owners to manage vault- or folder-level users, groups and API tokens.
Note that vault- or folder-level users and groups could only be used in their home folder and its subfolders. API tokens could be only created for the folder-level users of the same folder.
Group Cache TTL
Short term group membership cache TTL in minutes.
The application caches group membership information for a logged in user to optimize access to user directories.
The smaller this parameter is the more frequently the application queries user directory for the user group membership to check permissions to access certain objects or operations.
To force reset the cache before TTL expiration please use the control on the settings screen.
Health Check Process
Enables or disables periodic Health Check Process that verifies the up-time status of various system components.
Managed Path
Application URL to use by the clients.
Password Expiration Warning
This parameter enables password expiration warning alert for Active Directory integrated users in 5 days to password expiration.
Proxy Server
This parameter defines proxy server configuration to access application updates.
The parameter should be specified in the format host:port.
Record Cache TTL
Short term record cache TTL in minutes. The application caches record information to optimize retrieval of frequently accessed records. The smaller this parameter is, the more frequently the application queries the record data from the database. The larger the value is, the memory usage will increase. If set to 0 then it will disable the cache. Enabling xtam.perflog* properties will provide record cache usage information.
Restrict Scripts View
This option limits which roles can view scripts within the software.
When Enabled, only users assigned the Global Role: System Administrator or Global Role: Auditor role may view scripts. When Disabled, which is the default state, more users with varying degrees of permissions are able to view scripts using the software.
It is recommended to leave this parameter Disabled to allow for the intended use and full functionality of task execution in the software. It is also recommended to not include sensitive or privileged credentials or values in a script, but rather use Script Variables or Placeholders to reference these if possible.
Split View Role
This parameter enables the Split View option allowing to split passwords into different segments for two person access.
When enabled this parameter specifies whether the first or the last part of the password will be displayed to members of the Split View global role following the Unlock operation.
User Input Validation
This parameter adds additional layer of validation for user inputs like records password.
Provide space-separated placeholders for more protection of user's input against command injection
There are two types of placeholders:
regex() - accepts regular expression as a value
str() - accepts single character of string value
Placeholders formatting rules:
Placeholders must be separated by space
Placeholders value can not be empty
Placeholders value max size is 10 characters
Placeholders can be put in any number and combination
Example: str(whoami) regex(.*/>.*) str(host) str(') - will forbid any text in input like whoami, host or single quote character. Regular expression will validate against combination /> in input.
Visible Unlock
The parameter enables the option to display the value of the secret field on the screen right after the unlocking operation without the need to click the Reveal button.
This option is disabled by default requiring a user to reveal the unlocked secret value or to copy it to the clipboard in attempt to avoid unnecessary secret exposure.
Window Title
This parameter defines a prefix for the page title in the browser window.
Use the value blank to remove the prefix.
