IoT Settings: Retention, Re-check and Defaults

Organization-wide IoT settings are under Settings → Devices (IoT). Each tab opens only for the rights listed below. Every change is recorded in activity as Settings changed.

Which right opens which tab

Safety And Notifications and SI: Manage IoT Settings.
Sharing: Manage IoT Sharing. Only someone with Manage IoT Settings can move its switch.
Data And Exports: Manage IoT Settings (to change retention) or Export IoT Data (to download).
Connections, Sites And Spaces, Access and Alarms have their own rights and articles.

When your password is asked

A change that makes your devices less protected asks you to confirm your password first. These changes count:

asking for the password less often before security actions;
turning on Let SI members use devices, or raising Highest class SI members may use;
turning on Allow sharing by link.

On Safety And Notifications and SI, Needs your password appears beside Save when your change is one of these. On Sharing, the switch saves at once, and while it is off the tab says "Turning this on needs your password."

A password confirmed in the last 5 minutes is enough.

Safety and notifications

Password confirmation for security actions: how often a password is asked before a security action such as unlocking a door. Choose Every security action, Every 15 minutes, Every 60 minutes or Never. The default is Every 15 minutes. With 60 minutes, someone who walks away from a signed-in computer can run security actions for up to an hour. With Never, anyone at a signed-in computer can run security actions without a password.
Who hears about offline devices: Everyone who can see the device, Connection managers only (the default) or Nobody.
Tell connection managers when a connection has a problem: on by default.

Choose Save to keep your changes, or Discard to undo them.

Sharing

Allow sharing by link: on by default. Turning it off stops every link at once; named shares are not affected. You are asked to type LINKS and choose Turn off links. Turning it on again needs your password.
Live shares: how many shares are live, by kind, and the newest ones, with Manage shares.

SI

Let SI members use devices: on by default.
Highest class SI members may use: Read, Comfort, Equipment or Security. The default is Security. Safety-critical is never available to SI members.
Check an SI member's access opens the Access tab to show what one SI member can do.

See How SI Members Use Devices.

Data and exports

Keep activity for: a whole number of days between 30 and 365. The default is 90.
Commands, alarms and share uses are kept for 400 days. Connection checks are kept for 30 days. Current values are kept only as the latest reading.
A device that has been missing from its vendor for more than 30 days is removed.
Under Exports: Activity, Command audit and Share uses. See How to Export IoT Records.