There is a need to allow for specific user accounts to have a longer password expiration policy applied to them. However, Box's policy is EID-wide, which means that there has to be workarounds to deal with specific use-cases in which the user accounts require longer password expiration.

It would be great if there could be an exception added to the user account like what Box does with device pinning. This would be an easy solution to the problem, the admin could go into the users' settings, provide their password expiration time frame as the exception.