Reference Guide
...
Account Based Approval Mechani...
Approval Configuration
approval validity is granted based on time different times can be assigned for the approval process in kron pam the following parameter can be defined in the system config manager, and approval times are given in minutes, hours, days, and infinite parameter name parameter value description sapm approved account expiration time value 30m,2h,5d , 1 (“ 1” means infinite) this parameter defines the approval expiration time the sapm approved account expiration time values parameter is logically connected to the sapm show\ password expiration time values parameter a structure has been created for users to check out passwords within their approval periods for example, in an account that has received 2 hours of approval, only check out password periods up to 2 hours are shown since it is set parametrically, the sapm approved account expiration time values and sapm show\ password expiration time values parameters must always work synchronously