• Votes

    7

    Implement Attribute Based Access Policies

    In IDM, there is a plethora of customers who implement Attribute Based Access Policies. So by just assigning a resource (rather than a role that maps to a group ...

  • Votes

    6

    Make available an option to have more complex workflows

    Have the ability to set up more complex approval workflows such as more than one level such as a specific user as first level and then a compliance/Information Security ...

  • Votes

    6

    Shoulder Monitoring feature

    The PAM market guide specifically calls out the feature to monitor user activities in REAL TIME. Our video recording feature is useful to show people how they can track ...

  • Votes

    5

    Credential Vault

    - Allow to create a ssh domain for check in and check out credentials, being configured using ssh keys instead of root proxy user.

  • Votes

    5

    configure PAM to use credential/authentication in msgagnt smtp

    send email notification to client using smtp credentials in msgagnt.

  • Votes

    5

    Manage email notifications in Command Risk configuration

    As a user configuring Command Risk in the Command Control Console (risk, auto-disconnect, auto-block), it would be convenient to be able to toggle an email notification ...

  • Votes

    5

    Enable input keystrokes but disable output in session recording

    We have an issue where a user of PAM could have PII or PHI data returned in their Unix sessions. We have been rolling out PAM to servers we host in EU. Our legal team ...

  • Votes

    4

    Credential Vault

    - Expose available credentials from the vault on user´s portal, and allow users to choose which credential they want to retrieve from the vault for password check in and ...

  • Planned

    4

    Password Synchronization for root user

    There should be an option to select the Linux and Unix agent(s) to reset the root password. P.S. This won't break ssh-relay(vault > account domain) by using ssh keys ...

  • Votes

    3

    Approval for getting privileged access

    IT would be nice to have a little bit more complex approval possibility for request/approve to some access, already in PAM solution. Every customer does not have full ...

  • Votes

    3

    Custom Logo

    IT would be good to have option to customize the logo for PAM solution. Customers like own logo in the home page for example.

  • Planned

    3

    8 second password view

    In PAM User console, for the password Checkout feature, after user checks-out, the credentials are displayed for 8 seconds and then hidden. The user can click 'Show ...

  • Votes

    3

    Able to run the password reset using scheduler

    To be able to run the password reset using scheduler for the privileged account set in the credential vault. This is to comply with the password age policy.

  • Votes

    2

    Emergency access - Filter in the GUI for split the responsibilities at ...

    In the PAM emergency access can only be approved by the admins group and its cannot be split the responsibilities. As User Case for this Expand: In the emergency access ...

  • Votes

    2

    List all commands available from policies for USRUN

    It would be a nice option for a local Linux/Unix user to be able to list all the enhanced commands available to the user (from policies) for USRUN.

  • Votes

    1

    PAM: Checkout of a different credential by the same user returns an ...

    PAM core design is to allow users to checkout only one credential per resource but we would like to have it that a user can check out multiple credentials per each ...

  • Votes

    1

    Notify user on Windows Privileged session recording

    When the user access Windows server using RDP or Direct Windows session, if the server has install PAM agent and the Windows session is recorded it would be good to ...

  • Votes

    1

    Language Pack for user PAM portal

    For the access of PAM portal with ordinary user, it would be nice to have an option to build interface to be visible in our native language which is Slovenian.

  • Votes

    1

    Add Account Domain Credential and Host Group Command Control ...

    Have the ability to automate adding local account, domain account and DBMS local account to the credential vault. Have the ability to automate adding host to Host group ...

  • Votes

    1

    Schedule one-time access

    It would be great to have another schedule option for one-time schedules granting permission to a rules for a set calendar dates. In PAM Command Control / Schedules have ...