PAM

PAM controls and monitors accounts with elevated permissions, such as domain admins, root accounts, and service accounts. Typical features include credential vaulting, session recording, and checking out passwords just in time. Because privileged accounts are prime targets for attackers, PAM sharply limits the damage a single compromise can cause.