FAQs | Access Control

To meet compliance requirements with the PCI standard, inactive user sessions are automatically terminated after 15 minutes.

Passwords must contain:

• Uppercase and lowercase letters
• Numbers
• Special characters
• At least 12 characters

NOTE

Your new password must be different from the last four passwords used.

TIP

See how to change your password.

If you have already had permissions granted for a specific feature, but it is still not available or does not work as expected, the problem may be related to additional permissions that have not been granted.

Permission management is role-based. Each user is associated with at least one role, and each role has a specific set of permissions.

Some features require permissions that go beyond that single resource. This means that even if you have permission to use a main feature, you may need other permissions for everything to work correctly.

What to check:

• Permissions: it's possible that a feature needs access to data or actions that are controlled by permissions associated with other features.

For example: to access the API catalog, you may need not only permission for the catalog itself (an API Platform feature), but also the "Groups" permission from Access Control.

• Roles: make sure that the roles to which the user is associated include all the permissions necessary for the desired feature.

TIP

See also: Permissions.

When a new user is added to the system, or when an existing user requests the reactivation of their account, an email is sent with an activation link.

This link has a limited time for use: 48 hours.

If the link expires before the user activates or reactivates their account, contact the environment administrator so they can proceed with account activation.

If a federated login provider is already configured in your environment, the other providers will appear disabled for configuration.

This happens because each environment allows only one active provider at a time.

To configure another provider, you must deactivate the currently active provider: click the card to edit it and then click Delete Login.

WARNING

When deleting a federated login provider, all users linked to it will be permanently deleted automatically and without warning. It is not possible to recover this data after deactivation.