Accessing the PAM Admin Interface

This section is intended to give you an understanding of what is available on the Admin Interface based on your PAM role.

PAM Admin Interface

Within PAM, the Admin Interface is available to PAM users that are a member of the Owner, Admin or Auditor role. However the level of access will depend on the PAM role assigned.

You can determine the PAM role assigned to you via the user interface.

The PAM roles will determine the view you will see within the Admin Interface and what operations the permissions will allow.

The below table details the available access level for each PAM role.

Section	Action	Owner	Admin	Auditor
Manage	Manage users	r/w	r/w	r/o
	Manage user groups	r/w	r/w	r/o
	Manage devices	r/w	r/w	r/o
	Manage Active Directory	r/w	r/w	r/o
	Manage static vaults	r/w	r/w	r/o
	Manage accounts	r/w	r/w	r/o
	Generate Breakglass	Yes
	Reveal Credentials	Yes
	Manage account mappings	r/w	r/w	r/o
	Manage profiles	r/w	r/w	r/o
	Manage schedules	r/w	r/w	r/o
	Manage files	r/w	r/w	r/o
	Manage MAP servers	r/w	r/w	r/o
Reporting	Device access	r/w	r/w	r/o
	Playback session recordings	Yes	Yes	Yes
	Export session recordings	Yes	Yes
	Shadow live sessions	Yes	Yes	Yes
	Access requests	r/w	r/w	r/o
	Change tickets	r/w	r/w	r/o
	User rights audit	r/w	r/w	r/o
	Tasks	r/w	r/w	r/o
	Inventory	r/w	r/w	r/o
	Management	r/w	r/w	r/o
	Analytics	r/w	r/w	r/o
	Behaviour Analytics	r/o	r/o	r/o
System	System queue	r/w	r/w	r/o
	System configuration	r/w	r/w	r/o
	Configure Osirium Support account	Yes
	Roles	r/w	r/w	r/o
	API applications	r/w	r/w	r/o
	Template library	r/w	r/w	r/o
	Email subscriptions	r/w	r/w	r/o
	Configure meta-columns	r/w	r/w	r/o
	Logs	r/w	r/w	r/o