Privileged Access Management is a solution that manages privileged access across an organization and ensures privileged accounts are audited, managed, controlled and protected from abuse. A privileged account provides a higher level of access rights than a regular user account. Examples include administrator accounts for access to systems, networks and security solutions, applications, or user accounts that have been granted special or elevated privileges. For these reasons, it is important to protect privileged accounts from misuse. According to Gartner, BeyondTrust's solutions have long been among the highest rated products in their category (the "leaders" quadrant).
The PAM solution from BeyondTrust is a modular system consisting of the following elements:
The BeyondTrust platform serves as a central interface for organizations to centrally manage all access permissions, passwords and SSH keys across the organization with the ability to set, control and enforce their chosen corporate security policy in one tool. Using the tool, users authenticate against the system with a single login and password, without knowing access permissions to endpoint systems. Once access is granted and established, password rotation to that system occurs automatically without the need for further intervention. All passwords are securely stored in a secure password store. Once access is granted, session monitoring is automatically initiated, which can be live monitored or stopped by authorized individuals or audited back and used as evidence in incidents or litigation.
Automatic account detection
Central secure password storage (FIPS 140-2 standard)
Secure password use with SSO (Single-Sign-On) support
Applications - Applications (A2A) password management
Secure SSH key management
Agentless privileged session management
Central management of all privileged accounts and access across the organisation
Set up corporate policy enforcement in one integrated platform
Granular Access Policy
Integrated session monitoring (recording of access sessions) across all privileged accesses in the organization with playback and auditing capabilities
Accelerate the process of consolidating all privileged accounts, passwords, assets and SSH keys through automated scanning and dynamic categorization into Smart Groups
Secure encrypted central storage of all passwords (Password Vault) including automatic password and SSH key rotation after each login
The management and protection of privileged login data is essential to reduce the risks associated with the management of privileged accounts, but it is also essential to comply with applicable regulations, standards and laws (ZoKB, GDPR, Personal Data Protection Act, Copyright Act, eIDAS). The importance of PAM solutions is currently growing and will grow especially with the development of new systems, applications, process automation (password exchange between applications/robots), types and numbers of cloud providers, hybridity of infrastructures, global collaboration by connecting third parties and vendors to internal networks and systems, etc.
