Check-out approvals add an authorization step before a privileged account or sensitive entry can be checked out and used. In Devolutions PAM, this means a designated approver must validate the business need and duration before credentials are released, strengthening oversight and enforcing least privilege.
When Devolutions PAM is enabled with Devolutions Hub Business, users request access to privileged accounts, approvers handle these requests, and resulting activity appears in Privileged access reports, including dedicated check-out requests views. A typical use case is requiring team leads to approve temporary access to domain admin accounts during maintenance windows.
Share your feedback