Lock operator accounts automatically

If you are an Organization Administrator, Enterprise Administrator, or System Administrator, you can configure your BlackBerry AtHoc system to automatically lock operator operator accounts when operators are inactive. When configured, operators who have not logged in to the system for the specified time have their operator account locked.

Locked operators cannot log in to the management system until an Enterprise Administrator or Organization Administrator unlocks the account. Operator roles, permissions, and restrictions are preserved when an operator account is locked due to inactivity.

The operator's inactivity period is calculated using the Last Login Date attribute. If the operator has not logged in to the management system, the inactivity period is calculated based on the date the operator was granted permissions. When automatic locking of an operator's account is enabled, a system job runs every 24 hours to lock operator accounts based on their last successful login.

Tip: Use the Last Login Date attribute to identify and notify operators whose accounts will be automatically locked due to inactivity.

The Accountability Officer and SDK User roles cannot be locked automatically.

  1. In the navigation bar, click The Settings icon.
  2. On the Settings screen, in the Setup section, click Security Policy.
  3. On the Security Policy screen, in the Lock Operator Permissions section, select one or more roles from the Operator Roles dropdown list.
  4. Select the number of days of inactivity from the Auto Lock Permissions after dropdown list.
  5. Optionally, click Add Condition to add additional operator roles to be locked after a period of inactivity. You can add up to three conditions.
  6. Optionally, click Remove Rule icon to remove a lock rule.
  7. Click Save.