New Capability: Machine Account Creation

Announcements Product News
, , ,
5

One important detail we’d like to clarify about Machine Account Creation and access requests that wasn’t included in the original announcement.

When an entitlement/access item has an End Date required (announcement of End Date and Max Duration), the machine account creation flow currently does not include a UI field to enter an end date.

Because of that, behavior is as follows:

  • If End Date is required and the access item has a Max Duration configured, we automatically set the request end date to the maximum allowed date.
  • If End Date is required and no Max Duration is configured, admins should configure fallbackAccessDurationInDays in access-request-config.
    • This fallback duration is used to calculate the request end date.
    • If no fallback is configured, the request fails because an end date is required but not provided.

We are planning a fast-follow enhancement post-GA to allow users to specify an end date directly in the UI.