Overview

activate privileged access management (pam) provides secure, policy driven control of administrative and high privilege accounts it ensures privileged access is granted only when needed, under governance and full audit pam operates natively within the activate platform, sharing the same workflows, roles, and approval mechanisms as standard access management overview the activate privileged account manager module delivers a self service capability to manage the lifecycle of privileged accounts across your organisation it simplifies the creation, control, and review of accounts while enforcing consistency, security, and compliance privileged accounts are automatically discovered and catalogued within activate business owners are assigned to each account, allowing them to manage access and perform reviews without it intervention key capabilities just‑in‑time access – grant time bound privileged roles with automatic expiry policy‑based restrictions – apply granular rules by role, department, location, or system integrated workflows – trigger approvals, notifications, and reviews within activate credential management – reset, rotate, and enforce password changes across account types account lifecycle automation – create, delete, and update privileged accounts with consistency attestation & reviews – perform periodic user and owner reviews to confirm access requirements dashboard & reporting – centrally view account status, ownership, and password compliance account types activate supports management of multiple privileged account types, including service and application accounts administrator accounts (on premises ad and azure) vendor and external accounts non‑ad administrator accounts active directory group managed service accounts (gmsa) business workflow & ownership each privileged account can have one or more business owners with delegated management rights all account actions can require approval, with reminders and escalation built into the activate workflow engine approvals and changes are logged, auditable, and reportable key benefits enhanced security reduces standing privileges and enforces governance controls consistency ensures all privileged accounts follow organisational naming and provisioning standards compliance provides full visibility for internal and external auditors efficiency enables business users to self‑manage privileged accounts through guided workflows unified governance manages on‑premises and azure accounts through one platform automation reduces manual processes, errors, and administrative overhead typical use cases temporary membership in privileged ad groups for maintenance or incident response on‑call engineers obtaining short‑lived access to production systems vendor access managed through time‑limited, auditable accounts routine password resets and owner/user attestation cycles how pam fits into activate identity & roles uses activate’s role model (static, dynamic, target) to define who can request or receive elevation anywhere integration enables secure remote privileged access with enforced mfa connectors automates privilege elevation and deprovisioning across ad, azure, and saas systems audit trail records all privileged operations with complete traceability and exportable logs summary activate pam strengthens control over privileged access by combining self service, automation, and compliance in one integrated solution it helps organisations enforce least privilege, reduce risk, and simplify the management of administrative accounts across hybrid and cloud environments