Automatically Disbale Operator Accounts After 30 Days of Inactivity

1

Good Morning

Is there a way to set BigFix to automatically disable a console or webui operator if they have not logged in for 30 days. I am not seeing this documented anywhere and this is a audit finding.

2

As far as I know there isn’t one out-of-box. You can potentially write one yourself - quick session relevance to check all users that have not logged in for more than 30 days and post back via the API call to “disable”. The specific attribute you need to amend is:
<LoginPermission>Disabled</LoginPermission>