Devolutions PAM overview

Privileged access manager built for IT professionals

PAM

solution

Devolutions PAM is a robust, easy-to-deploy, and affordable privileged access management solution that balances productivity and security.

Start trial

Privileged account discovery
Automatic and scheduled password rotation
Password change propagation
Checkout request approval
Just-in-time privilege elevation
Administrative reports and auditing

Maximizing efficiency and security with Devolutions PAM

Privileged account discovery

Automatically scan your environment through a PAM provider. Available fully managed providers include:

Active Directory
Entra ID (Azure AD)
Local SSH Users
Microsoft SQL Server
Local Windows Users

The following providers only offer password resets and not discovery, but we are constantly improving!

MySQL
Cisco
Oracle

Don’t see yours yet? Create custom PAM providers through PowerShell and support nearly any source!

Check-out request approval

Allow your team to work how they need to with flexible checkout options for requesting approval in Devolutions Server or Hub.

Pre-defined time ranges for quick requests.
Custom time durations.
Specific time ranges, ideal for work outside standard hours.

Guarantee approvals go to the right person by assigning them to a specific individual or all approvers. Even approve requests on the go with Devolutions Workspace for Android or iOS!

Automatic and scheduled password rotation

Whether in Devolutions Server or Hub, enforce password rotations when checking in a privileged account. Set password rotation schedules for specific days and times, or a defined number of hours or minutes.

Ensure that your privileged account passwords are random by rotating them upon initial import from a provider!

Just-in-time privilege elevation

Instead of maintaining standing account permissions, use Devolutions PAM to provide the necessary privileges on check-out and revoke them on check-in.

Add Active Directory or Entra ID (Azure AD) groups to the allowed privilege elevation list, allowing your users to request higher privileges on demand.

Did a requestor ask for too many permissions? An approver can modify the approval request to add or remove JIT privilege requests!

Password change propagation

Passwords don't live only in Active Directory or Azure. Too often, passwords exist tied to services in different systems. Guarantee that your automatic password rotations reach the right places with PAM propagation.

With propagation scripts written in PowerShell, ensure that every password change reaches where you need it to go, such as a service, file, or database.

Session recording

Require session recording from the Devolutions Server web interface or directly within Remote Desktop Manager (RDM) to facilitate sharing with others and recordkeeping. Recordings can be saved locally by RDM or remotely by Devolutions Gateway in a variety of formats, such as:

webm
asciinema (terminal)

Play recordings directly from RDM or from the Devolutions Server web interface and quickly jump to the video segment you need.

Administrative reports and auditing

Stay on top of your requests and approvals with reporting and auditing in Devolutions Server and Hub. See all the details of a request and who approved it, and confirm that the passwords were rotated and propagated.

Filter by vaults, users, and actions to see all of the recent activities in PAM vaults and any password rotations! Export reports for consumption by other logging systems to ensure compliance.

Ready to level up?

Learn how Devolutions PAM works together across the Devolutions ecosystem through our in-depth documentation.

Need a PAM solution?

Are you looking for a seamless way to manage domain administrator access? Want to streamline updating root accounts with each employee change?

If this sounds like you, then you need a PAM solution. Whether you use Devolutions PAM or Remote Desktop Manager's third-party PAM integrations, the IT world moves fast, and you need control without putting the brakes on your team's productivity.

What is Devolutions PAM?

Devolutions privileged access management (PAM) is an essential security platform designed to control, monitor, and secure elevated access for users, accounts, processes, and systems across your organization. It seamlessly integrates with enterprise systems, supports a broad range of security protocols, and adheres to governance standards.

Devolutions PAM delivers enterprise-grade robustness in a solution adapted to SMBs, combining ease of use with scalability. We are confident that it provides the best security framework for growing businesses. This tool helps minimize your organization’s attack surface and reduce the likelihood and severity of breaches caused by hackers, insider misuse, or negligence, making it an indispensable asset for enhancing security and managing privileged access effectively.

Start your FREE 30-day trial

Experience first-hand how our Privileged Access Management (PAM) solution can secure and streamline your operations — fill out the form to get started.

PAM