Privileged session
A privileged session is a temporary privileged access to critical assets — the window during which an administrator or service acts on a sensitive system. Learn how privileged sessions are controlled, monitored, and recorded, and why they are the moment security matters most.
What is a privileged session?
A privileged session is a temporary period of privileged access to a critical asset — for example, an administrator connecting to a production server, or a service accessing a database with elevated rights. It is a moment of concentrated risk: sensitive changes can be made and sensitive data reached, so privileged sessions are controlled and recorded far more closely than ordinary connections.
How are privileged sessions controlled?
Privileged sessions are typically governed by a privileged session manager (PSM), which:
- Brokers the connection so the user's device never touches the raw credential.
- Injects the credential into the session, keeping it hidden from the user.
- Records the session as video, keystroke, or command logs.
- Monitors activity in real time and can terminate a risky session.
Privileged session vs. standard session
A standard session is an ordinary connection a user makes in the course of their work. A privileged session involves elevated rights over a critical asset, so it is treated differently: the credential is hidden through injection, the session is often recorded, and access is frequently granted just-in-time rather than standing. The elevated stakes are what justify the extra control.
Why are privileged sessions monitored?
Because privileged sessions are where the most sensitive work happens, they are where oversight matters most. Monitoring and recording give security teams a live and reviewable account of privileged activity, deter misuse, and provide the evidence auditors expect. If something goes wrong, the recording shows exactly what occurred and when.
Frequently asked questions
What is a privileged session?
A privileged session is a temporary privileged access to critical assets — the window during which an administrator or service acts on a sensitive system with elevated rights. Privileged sessions are controlled and recorded closely because they are moments of concentrated risk.
How is a privileged session different from a standard session?
A standard session is an ordinary connection a user makes for everyday work, while a privileged session involves elevated rights over a critical asset. Privileged sessions hide the credential through injection, are often recorded, and are frequently granted just-in-time rather than as standing access.
Why are privileged sessions recorded?
Privileged sessions are recorded so organizations have a verifiable account of who accessed sensitive systems and what they did. Recordings support incident investigation, deter misuse, and provide the evidence required by compliance frameworks for privileged activity.
Control every privileged session
Broker, record, and audit privileged sessions — with credentials injected, never exposed.
Related terms
Privileged session manager (PSM)
Controls, monitors, and records privileged sessions to critical systems.
Read now →Privileged access management (PAM)
Controls, audits, and secures access to an organization's most sensitive systems.
Read now →