Konubinix' opinionated web of thoughts

Privileged Access Management

Fleeting

Privileged Access Management (PAM) refers to systems that securely manage the accounts of users who have elevated permissions to critical, corporate resources. These may be human administrators, devices, applications, and other types of users

— https://www.onelogin.com/learn/privileged-access-management

Privileged Access Management is also sometimes referred to as Privileged Account Management or Privileged Session Management (PSM). Privileged session management is actually a component of a good PAM system.

— https://www.onelogin.com/learn/privileged-access-management

they have elevated levels of permissions, such as the ability to change settings for large groups of users.

— https://www.onelogin.com/learn/privileged-access-management

root account on a Linux machine is a form of privileged account

— https://www.onelogin.com/learn/privileged-access-management

uses the PAM portal to define methods to access the privileged account

— https://www.onelogin.com/learn/privileged-access-management

uses the PAM portal to define the policies of who can assume access to these privileged accounts and under what conditions

— https://www.onelogin.com/learn/privileged-access-management

PAM user is usually asked to provide a business justification for using the account.

— https://www.onelogin.com/learn/privileged-access-management

provided access via the PAM.

— https://www.onelogin.com/learn/privileged-access-management

sometimes confused with Identity Access Management (IAM). IAM focuses on authenticating and authorizing all types of users

— https://www.onelogin.com/learn/privileged-access-management

IAM manages general access to applications and resources

— https://www.onelogin.com/learn/privileged-access-management

PAM focuses on privileged users

— https://www.onelogin.com/learn/privileged-access-management

additional set of controls normally not relevant or even appropriate for regular users (such as session recording).

— https://www.onelogin.com/learn/privileged-access-management

Make sure that privileged access is terminated automatically

— https://www.onelogin.com/learn/privileged-access-management

privilèges (PIM) ou sécurité des accès à privilèges (PAS), la gestion des accès à privilèges s’appuie sur le principe du moindre privilège, selon lequel les utilisateurs ne reçoivent que le niveau d’accès minimum requis pour effectuer leur travail.

— https://www.cyberark.com/fr/what-is/privileged-access-management/

humains sont toujours le maillon faible de la chaîne de cybersécurité. La gestion des accès à privilèges aide les organisations à s’assurer que les personnes disposent uniquement du niveau d’accès nécessaire pour faire leur travail.

— https://www.cyberark.com/fr/what-is/privileged-access-management/

exiger l’authentification à plusieurs facteurs

— https://www.cyberark.com/fr/what-is/privileged-access-management/

tous les comptes connus liés à l’infrastructure dans un coffre-fort numérique géré de façon centrale. Renouveler régulièrement et automatiquement les mots de passe après chaque utilisation.

— https://www.cyberark.com/fr/what-is/privileged-access-management/

difference between privileged access management and privileged account management (both called PAM)?

— https://thycotic.com/resources/privileged-access-management/

Privileged account management is the IT security process of using policy-based software and strategies to control who can access sensitive systems and information.

— https://thycotic.com/resources/privileged-access-management/

Today, most people define PAM as privileged access management. This definition of PAM reflects a broader security category than privileged account management. It includes cyber security strategies for exerting control over elevated access and permissions for users, accounts, and processes. It determines not only which people and systems can access a privileged account but also what they can do once logged in.

— https://thycotic.com/resources/privileged-access-management/

Notes pointant ici