Access Management - Technology
PAM
(Privileged Access Management)
Tight controls around powerful administrator accounts that can make high-impact changes
What's it for?
Adds extra protection around powerful administrator accounts that could cause serious damage if misused.
For example…
Database admins check out a temporary admin password from a PAM vault; it expires after the change window and every use is logged
PAM gives a database administrator temporary access to a privileged account while recording the session and rotating the password afterwards.
Think of it like…
Keeping master keys in a signed-out cabinet, not hanging on everyone’s lanyard