Setting Password Expiration Policies
In Operations, you can set up password expiration options for subordinate users (staff members and service users) belonging to all Operations account types (reseller or customer). Such policies can be set separately for each account type. For details about account and user concepts in Operations, refer to the Accounts in Operations section.
After a user's password expires, during the next login attempt (with the correct credentials) they are redirected to the following screen:
Changing passwords on a regular basis is a security measure designed to protect users' data from unauthorized access. You can set up the ultimate level of password protection using the combination of the password expiration and password quality options.
Password expiration settings are configured by Operations users for their subordinate account users (for example, by a reseller for their customers) by means of password expiration policies, which define:
- The time period after which a user's password expires
- The ability for a subordinate account user to change (overwrite) the policy set for his or her account type (you may lock or unlock the policy for editing).
Password expiration settings defined for subordinate accounts and their own users are propagated to their Operations CPs as password expiration defaults, which can or cannot be overwritten (depending on whether the policy was locked or not locked for editing).
Settings defined for a reseller account type are propagated to the reseller's subordinate resellers and customers.