Set Password to Never Expire

In account maintenance, how can I set a password to never expire?
This would be for credentails for api calls.

image

1 Like

on what tab is that via smart client?

Just noticed you are on 2021, not sure if it existed back then.

Yes, it is.

1 Like

ric-flair-never-retire

1 Like

Hmm, there seems to be another way that doesnt require integration account and set the password expire date to blank.

1 Like

Why don’t you want to use an integration account?

1 Like

Setting the “Password Expires Days” to zero (0) will set a user password to never expire… but no clue if/how that impacts integration accounts.

1 Like

I think there was a change where Access Scope could only be applied to Integration Accounts, but I could be wrong on that. EDIT: If you apply an Access Scope, it will automatically set it to an Integration Account.

Separately, I find the setting useful during audits to know that the account is used by machines and not people. It makes the auditing better. :person_shrugging:

Access Scope is an excellent tool for limiting the access of an account and I’d encourage its use for limiting risk.

1 Like

And while we’re talking about API security, to balance the reduced frequency of password changes, systems (including Kinetic) will use API-KEYs that SHOULD expire. Being able to roll keys periodically is a good practice and very helpful during, uh, incidents.

1 Like