# FAQ - When are Aerospike security privileges on a client connection checked? **URL:** \ **Category:** Knowledge Base\ **Created:** [December 8, 2019, 9:43pm UTC](https://discuss.aerospike.com/t/faq-when-are-aerospike-security-privileges-on-a-client-connection-checked/6904 "2019-12-08T21:43:07Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Aerospike\_Knowledge](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.aerospike.com/aerospike_knowledge/32/368_2.png) [@Aerospike\_Knowledge](https://discuss.aerospike.com/u/Aerospike_Knowledge)\ **Post date:** [December 8, 2019, 9:43pm UTC](https://discuss.aerospike.com/t/faq-when-are-aerospike-security-privileges-on-a-client-connection-checked/6904/1 "2019-12-08T21:43:07Z")
**The Aerospike Knowledge Base has moved to [https://support.aerospike.com](https://support.aerospike.com). Content on [https://discuss.aerospike.com](https://discuss.aerospike.com) is being migrated to either [https://support.aerospike.com](https://support.aerospike.com) or [https://docs.aerospike.com](https://docs.aerospike.com). Maintenance on articles stored in this repository ceased on December 31st 2022 and this article may be stale. If you have any questions, please do not hesitate to raise a case via [https://support.aerospike.com](https://support.aerospike.com).** # FAQ - When are Aerospike security privileges on a client connection checked? ## Detail The Aerospike [Authentication](https://www.aerospike.com/docs/operations/configure/security/access-control/index.html) allows cluster access to be controlled via a configured Access Control list. Both roles and privileges can be assigned to users at a cluster, namespace or set level. At what point are these security privileges checked? If a privilege is changed once a user has established a connection, what happens? ## Answer Privileges are checked when a connection is established and also periodically during the lifetime of the connection. The period of the check is defined by the server parameter [`privilege-refresh-period`](https://www.aerospike.com/docs/reference/configuration/#privilege-refresh-period) which defaults to 300 seconds / 5 minutes. If new privileges are granted or existing ones revoked, this will come into operation after the periodic check. This is a dynamic parameter and so can be changed during runtime. ### Keywords CLIENT CONNECTION USER PRIVILEGE CHECK ### Timestamp December 2019 ---
**Author:** ![cyorke](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.aerospike.com/cyorke/32/2405_2.png) [@cyorke](https://discuss.aerospike.com/u/cyorke)\ **Post date:** [November 14, 2024, 4:05pm UTC](https://discuss.aerospike.com/t/faq-when-are-aerospike-security-privileges-on-a-client-connection-checked/6904/2 "2024-11-14T16:05:28Z")
---
**Author:** ![JD\_Gebicki](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.aerospike.com/jd_gebicki/32/2415_2.png) [@JD\_Gebicki](https://discuss.aerospike.com/u/JD_Gebicki)\ **Post date:** [August 27, 2025, 4:30pm UTC](https://discuss.aerospike.com/t/faq-when-are-aerospike-security-privileges-on-a-client-connection-checked/6904/3 "2025-08-27T16:30:20Z")