Security Tab

Password Complexity

Note: Editing the settings in the Password Complexity tab does not affect existing passwords.

Field	Description
Must have special characters	When selected, it forces users to create login passwords containing special characters. By default, this check box is not selected.
Must have lowercase characters	When selected, it forces users to create login passwords containing lowercase characters. By default, this check box is selected.
Must have uppercase characters	When selected, it forces users to create login passwords containing uppercase characters. By default, this option is not selected.
Must have digits	When selected, it forces users to create login passwords containing at least one digit. By default, this check box is selected.
Minimum Length	Specify the minimum number of characters user login passwords should contain. By default, it is 8. The length cannot be smaller than 6 and longer than 14.
Expiration Days	Specify the number of days for which the password is available. After this period the password expires and needs to be changed. The minimum accepted value is 0 (the password never expires), while the maximum is 120 days.
The Number of Previously Used Passwords	Enables you to define how many of your latest passwords are prohibited from use when setting up a new password. The minimum accepted value is 0, while the maximum one is 10.
Should change password on first login	When selected, users that log in to Orchestrator for the first time are required to change their password.

Account Lockout

Field	Description
Enabled	If checked, locks the account for a specific amount of seconds after a specific amount of failed login attempts. This also applies to the password change feature.
Account Lockout Seconds	The number of seconds a user needs to wait before attempting to log in again after exceeding the Max Access Attempts. The default value is 5 minutes. The minimum accepted value is 1, while the maximum one is 2592000 (1 month).
Max Access Attempts	The amount of login attempts a user can make before the account is locked. The default value is 10 attempts. You can set a value between 2 and 10.

Robot

Field	Description
Run Disconnected Hours	Specify the number of hours a Robot can run offline, without checking for its Orchestrator license. By default, it is set to 0. The maximum accepted value is 168 hours. This setting does not apply to Studio.
Allow both user authentication and robot key authentication	Allows users to authenticate to and access Orchestrator resources directly from UiPath Assistant, regardless of the authentication method, i.e. user authentication or robot key authentication.
Enforce user authentication, disable robot key authentication	Enforce interactive authentication. When enabled, token authentication is required for all activities calls.