---
title: Overview
slug: yn1q-overview
createdAt: 2025-06-11T20:26:21.329Z
---

Activate **Privileged Account** provides secure, policy-driven control of administrative and high-privilege accounts. It ensures privileged access is granted only when needed, under governance and full audit. PAM operates natively within the Activate platform, sharing the same workflows, roles, and approval mechanisms as standard access management.

# Overview

The **Activate Privileged Account **module delivers a self-service capability to manage the lifecycle of privileged accounts across your organisation. It simplifies the creation, control, and review of accounts while enforcing consistency, security, and compliance.

Privileged accounts are automatically discovered and catalogued within Activate. Business owners are assigned to each account, allowing them to manage access and perform reviews without IT intervention.

# Key Capabilities

- **Just‑in‑Time Access** – Grant time-bound privileged roles with automatic expiry. 
- **Policy‑Based Restrictions** – Apply granular rules by role, department, location, or system. 
- **Integrated Workflows** – Trigger approvals, notifications, and reviews within Activate. 
- **Credential Management** – Reset, rotate, and enforce password changes across account types. 
- **Account Lifecycle Automation** – Create, delete, and update privileged accounts with consistency. 
- **Attestation & Reviews** – Perform periodic user and owner reviews to confirm access requirements. 
- **Dashboard & Reporting** – Centrally view account status, ownership, and password compliance. 

# Account Types

Activate supports management of multiple privileged account types, including:

- Service and Application Accounts 
- Administrator Accounts (on-premises AD and Azure) 
- Vendor and External Accounts 
- Non‑AD Administrator Accounts 
- Active Directory Group Managed Service Accounts (gMSA) 

# Business Workflow & Ownership

- Each privileged account can have one or more **Business Owners** with delegated management rights. 
- All account actions can require approval, with reminders and escalation built into the Activate workflow engine. 
- Approvals and changes are logged, auditable, and reportable. 

# Key Benefits

- **Enhanced Security:** Reduces standing privileges and enforces governance controls. 
- **Consistency:** Ensures all privileged accounts follow organisational naming and provisioning standards. 
- **Compliance:** Provides full visibility for internal and external auditors. 
- **Efficiency:** Enables business users to self‑manage privileged accounts through guided workflows. 
- **Unified Governance:** Manages on‑premises and Azure accounts through one platform. 
- **Automation:** Reduces manual processes, errors, and administrative overhead. 

# Typical Use Cases

- Temporary membership in privileged AD groups for maintenance or incident response. 
- On‑call engineers obtaining short‑lived access to production systems. 
- Vendor access managed through time‑limited, auditable accounts. 
- Routine password resets and owner/user attestation cycles. 

# How PAM Fits into Activate

- **Identity & Roles:** Uses Activate’s role model (static, dynamic, target) to define who can request or receive elevation. 
- **Anywhere Integration:** Enables secure remote privileged access with enforced MFA. 
- **Connectors:** Automates privilege elevation and deprovisioning across AD, Azure, and SaaS systems. 
- **Audit Trail:** Records all privileged operations with complete traceability and exportable logs. 

# Summary

Activate PAM strengthens control over privileged access by combining self-service, automation, and compliance in one integrated solution. It helps organisations enforce least privilege, reduce risk, and simplify the management of administrative accounts across hybrid and cloud environments.