Devolutions PAM

Need a PAM solution?

Are you looking for a seamless way to manage domain administrator access? Want to streamline updating root accounts with each employee change? If this sounds like you, then you need a PAM solution. Whether you use Devolutions PAM or Remote Desktop Manager's third-party PAM integrations, the IT world moves fast, and you need control without putting the brakes on your team's productivity.

What is Devolutions PAM?

Devolutions privileged access management (PAM) is an essential security platform designed to control, monitor, and secure elevated access for users, accounts, processes, and systems across your organization. It seamlessly integrates with enterprise systems, supports a broad range of security protocols, and adheres to governance standards. Devolutions PAM delivers enterprise-grade robustness in a solution adapted to SMBs, combining ease of use with scalability. We are confident that it provides the best security framework for growing businesses. This tool helps minimize your organization’s attack surface and reduce the likelihood and severity of breaches caused by hackers, insider misuse, or negligence, making it an indispensable asset for enhancing security and managing privileged access effectively.

Accelerate your team's productivity with PAM

Imagine granting your new employees access to a server without their knowing the admin password through secure credential injection. After a privileged account approval and checkout, they securely connect via Devolutions Gateway from wherever they are and the password automatically rotates. All is seamless, and productivity isn’t hindered. This is the Devolutions PAM and Remote Desktop Manager Team platform difference.

1. Open session with user that has no password-viewing rights.
2. Request to check out a privileged account, and once approved, RDP to the remote system with Devolutions Gateway.
3. Upon check-in, the password automatically rotates.

Maximizing efficiency and security with Devolutions PAM

Privileged account discovery

Automatically scan your environment through a PAM provider. Available fully managed providers include:

• Active Directory
• Entra ID (Azure AD)
• Local SSH Users
• Microsoft SQL Server
• Local Windows Users The following providers only offer password resets and not discovery, but we are constantly improving!
• MySQL
• Cisco
• Oracle Don’t see yours yet? Create AnyIdentity custom providers through PowerShell and support nearly any source!

Check-out request approval

Whether in Devolutions Server or Hub, enforce password rotations when checking in a privileged account. Set password rotation schedules for specific days and times, or a defined number of hours or minutes. Ensure that your privileged account passwords are random by rotating them upon initial import from a provider!

Automatic and scheduled password rotation

Passwords don't live only in Active Directory or Azure. Too often, passwords exist tied to services in different systems. Guarantee that your automatic password rotations reach the right places with PAM propagation. With propagation scripts written in PowerShell, ensure that every password change reaches where you need it to go, such as a service, file, or database.

Just-in-time privilege elevation

Instead of maintaining standing account permissions, use Devolutions PAM to provide the necessary privileges on check-out and revoke them on check-in. Add Active Directory or Entra ID (Azure AD) groups to the allowed privilege elevation list, allowing your users to request higher privileges on demand. Did a requestor ask for too many permissions? An approver can modify the approval request to add or remove JIT privilege requests!

Password change propagation

Allow your team to work how they need to with flexible checkout options for requesting approval in Devolutions Server or Hub.

• Pre-defined time ranges for quick requests.
• Custom time durations.
• Specific time ranges, ideal for work outside standard hours. Guarantee approvals go to the right person by assigning them to a specific individual or all approvers. Even approve requests on the go with Devolutions Workspace for Android or iOS!

Session recording

Require session recording from the Devolutions Server web interface or directly within Remote Desktop Manager (RDM) to facilitate sharing with others and recordkeeping. Recordings can be saved locally by RDM or remotely by Devolutions Gateway in a variety of formats, such as:

• webm
• asciinema (terminal) Play recordings directly from RDM or from the Devolutions Server web interface and quickly jump to the video segment you need.