lstwopersonintegrityrequest

Use the lstwopersonintegrityrequest command to list the role elevation requests active on the system.

Syntax

request_id | user_name: (Required) Specifies the ID or username that is associated with the request.

The following attribute values can be displayed in the output:

Table 1. lstwopersonintegrityrequest output
Attribute	Description
request_id	Indicates the unique ID of the role elevation request.
user_name	Indicates the user name that is associated with the role elevation request.
is_remote	Indicates whether the user named in the role elevation request is a remote user. The value can be yes or no.
minutes_requested	Indicates the number of minutes requested by the user.
minutes_approved	Indicates the number of minutes approved by the user.
request_time	Indicates the time (YYMMDDhhmmss) of request.
approval_time	Indicates the time (YYMMDDhhmmss) of approval.
expiration_time	Indicates the date and time (YYMMDDhhmmss) when the temporary role elevation expires.

Note: The expiration_time field value is adjusted as the role elevation request progresses.

It is calculated first at the time that the role elevation request happens (for example mktwopersointegrityrequest) based on the time of the request (request_time field value) plus 24 hours.
When the role elevation request is approved (for example chtwopersointegrityrequest -approve), the expiration time is recalculated based on the time the request is approved (approval_time field value) plus the approved duration of the request (minutes_approved field value).
Additionally, if the system clock shifts (for example, system time change) five minutes or more, the expiration times of all role elevation requests are updated to reflect that difference. That is the case after a system power-off, any role elevation requests present at that time, when the system restarts will have their expiration times adjusted resulting in those expiration times extending approximately by the length of the power-off.