SERVER PAM

Server Privileged Access Management

(PAM) for Least Privilege
Protect your servers against identity-based attacks

Digital transformation continues to disrupt the enterprise environment,

increasing complexity and fragmenting identities. A modern Privileged Access
Management (PAM) solution founded on the best practices of least privilege Server PAM
and Zero Trust is essential to protect your servers against new and evolving
identity-based threats. Benefits
Server PAM facilitates large-scale digital transformation, modernizing how
organizations secure privileged access to servers both on-premise and in the
cloud. It allows humans and machines to seamlessly authenticate, enforcing ENHANCE SECURITY
& MITIGATE RISK
least privilege with just-in-time privilege elevation, increasing visibility and
Enforce just-in-time (JIT) least
accountability, while reducing administrative access risk. privilege access with multi-factor
authentication (MFA) enforcement at
system login and privilege elevation
Centralized Identity and Cloud-Native
to prevent lateral movement and
policy management
• Capitalize on the cloud with a modern align with least privilege and Zero
• Choose what’s best for you. Manage PAM solution purpose-built for hybrid Trust best practices. Achieve a more
privileged access, and MFA policies robust posture, reduce costs and IT
cloud IT infrastructures. Don’t be
overhead, while improving efficiency.  
in Active Directory Patented Zone fooled by lift and shift.
Technology consolidates complex and
disparate non-Windows identities into CONSOLIDATE IDENTITIES 
Multi-Factor Authentication & IMPROVE PRODUCTIVITY
Active Directory for greater security and
centralized management. (MFA) enforcement Give administrators one account to
access Windows, Linux or Unix on-
• Block malware and ransomware and premise or in the cloud by eliminating
stop lateral movement by enforcing local privilege accounts to reduce
Identity consolidation with
advanced Active Directory(AD) MFA at system login and privileged the attack surface. Resulting identity
application and command elevation. centralization allows for consistent
bridging centralized authentication and
authorization policies for privileged
• Server PAM extends Active Directory
policy and authentication benefits Host-based auditing, reporting, access to improve productivity.
and session recording
to Linux and UNIX, giving admins a
single, accountable ID to log in cross- • Easily detect rogue activity used to MEET COMPLIANCE MANDATES 
& INCIDENT INVESTIGATION
platform. Unify your IT infrastructure by circumvent security controls and
Leverage granular, host-based
consolidating identities, authentication, attribute activity to users. Log all
auditing and session recording
and access management for Linux and privileged session activity in forensic to prove compliance and to aid
UNIX within AD. detail for security audit, corrective investigation of incidents across
action, and compliance reporting. on-premise and cloud provider
instances.
Multi-directory brokering
• Broker authentication to Active Directory,
OpenLDAP, and cloud directories such
as Azure AD, Okta, and Ping, without
requiring direct connections from Linux or
Windows Servers.

DATASHEET
DATASHEET
Server PAM

Control privileged access on-premise and in the cloud

Server PAM empowers organizations to take control of privileged access through centrally managed policies consistently enforced
on servers. Multi-directory brokering simplifies administrator authentication and consolidates identities, establishing trust between
disparate identity providers and Windows and Linux instances across hybrid IT environments. MFA enforcement at server login and
privilege elevation adds additional identity assurance for access to sensitive systems. Real-time session monitoring and recording
on each server ensure complete visibility and actionable event details.

Authentication Privilege Elevation

Simplify user authentication to servers from any directory Enforce the principle of least privilege across Windows,
service, including Active Directory, OpenLDAP, and cloud Linux, and UNIX infrastructure on-premise, in the cloud, and
directories such as Azure AD, Okta, or Ping. Secure access multiple clouds. Reduce standing privilege and prevent lateral
to Linux, Unix, and Windows virtual systems and containers. movement to minimize the risk of a data breach or ransomware
Enforce MFA for stronger identity assurance.   attack. Administrators can request just-in-time privilege
elevation for a limited time. 
• Multi-directory brokering  
• Consistent and automated security policy management  
• Machine identity, delegated machine credentials,
and credential management   • Privilege elevation for least privilege enforcement 

• Authentication policy management   • Just-in-time privilege elevation workflow 

• MFA at system login • MFA at privilege elevation

• Centrally manage the lifecycle of local accounts

and groups Audit and Monitoring
Identify abuse of privilege, thwart attacks, and easily prove
regulatory compliance with a detailed audit trail and video
recordings that capture all privileged activity. 

• Granular host-level event logging and auditing

• Searchable recordings for visual analysis

• Holistic view of privileged activity across Windows and Linux

servers, IaaS, and databases

• Reports on every user’s privileges and associated activity

for compliance

Learn more at Delinea.com

Delinea is a leading provider of Privileged Access Management (PAM) solutions for the modern, hybrid
enterprise. The Delinea Platform seamlessly extends PAM by providing authorization for all identities,
controlling access to an organization’s most critical hybrid cloud infrastructure and sensitive data to help
reduce risk, ensure compliance, and simplify security. Delinea removes complexity and defines the boundaries
of access for thousands of customers worldwide. Our customers range from small businesses to the world’s
largest financial institutions, intelligence agencies, and critical infrastructure companies. delinea.com

© Delinea