Most PAM administrators are aware of the Warnings section on the PAM Global Settings page. There is a checkbox to control whether the license warning is shown or not during login, and another checkbox for whether or not a recording warning is shown when users start a target device access session that is being recorded.
What is not as well known is that this setting only comes into play for users that are not members of any user group.
Every user group has its own Applet Recording Warning setting, and this takes precedence over the global setting.
If a user is member of one or more user groups, then the recording warning message will be shown if at least one of the groups has the Applet Recording Warning flag set to "Yes". If all groups have it set to "No", the message will not be shown, irrespective of the global setting.
Here is an example of how the messages look like when the built-in SSH method is used to access a Linux device:
