Adam ListekVersion 2026.1 updates the privileged access management package with:
- stronger account lifecycle controls,
- better operational visibility for PAM services,
- and expanded platform coverage for privileged workflows.
Manage temporary access to PAM accounts
You can now grant temporary, time-boxed access to a PAM account itself. Previously, access had to be assigned as full (ongoing) access to the PAM account; now you can specify a limited duration so the account is only available during the approved window, improving control and reducing standing privileges.
Assign and manage privileged access account risk
PAM now includes built-in privileged access risk levels, and administrators can also define custom risk entries to match their environment. Custom risk definitions can be created for Domain users or Azure AD/Entra ID users, and identified by name, SID, or RID to support different directory scenarios.
Extend PAM to MongoDB through discovery and account password rotation
The new MongoDB PAM provider expands your privileged access coverage to MongoDB, helping teams centralize credential discovery and apply consistent PAM controls to database accounts. In this release, it does not rotate the primary admin password, but it can discover and rotate non-primary admin accounts, which still reduces exposure from long-lived secrets and improves day-to-day operational security.
End privileged sessions automatically after account check-in
After a PAM account is checked in, DVLS can now terminate any active sessions through the Devolutions Gateway that use that PAM account. This behavior is enabled by default to enforce clean check-ins, but admins can change it via a setting to keep sessions alive when needed (for example, during long-running operations).
Improve check-in behavior with auto check-in on entry close
Administrators can now centrally control whether PAM sessions are terminated on check-in, moving this from a user-side preference in RDM to an admin-enforced setting. This helps standardize PAM behavior across users and ensures sessions are closed consistently when accounts are checked back in.
Monitor PAM service health and trigger web-based updates
Devolutions Gateway and Hub continue to close the gap with DVLS by expanding operational capabilities in the web experience. You can now perform live session shadowing for real-time oversight and support, and you can start Gateway updates directly from the web interface, reducing the need for manual server-side maintenance, requires Devolutions Agent.
Connect multiple PAM services for high availability
PAM Services now supports high availability by allowing you to deploy multiple service instances that are automatically detected and listed under Instances. This lets you scale out for redundancy and failover—if one instance is unavailable, others can continue handling requests—without requiring manual “add instance” configuration in the UI.
Enhance just-in-time elevation for SSH with Linux privilege set controls
PAM for Linux now supports Privilege Sets for SSH elevation, letting administrators define exactly what an elevated session can do. You can create a custom set by specifying allowed hosts, run-as targets, sudo tags (for example, NOPASSWD), and permitted commands, with a preview of the resulting rule. When a Linux SSH account is elevated through PAM, the selected privilege set is applied to enforce consistent, least-privilege access.
Tell us what you think
The 2026.1 release brings enhancements across all our solution packages. To explore the updates included in other packages, check out the other what’s new here:
We also invite you to visit our forum to share your feedback, ask questions, and discuss the changes with our team and the community.
As always, thank you for your continued support!
About privileged access management
Designed for privileged users requiring advanced PAM capabilities, this solution safeguards administrative credentials and enforces the principle of least privilege. It mitigates credential-based threats through automated password rotation and just-in-time privilege elevation.
Ready to get started? Buy the privileged access management package here.
Coralie Lemasson