Check-out approvals in Devolutions Server with Devolutions PAM add an extra authorization step before a privileged account can be used. When a user requests to check out a PAM credential, the request is routed to designated approvers, who can approve or deny it with a reason and time limit, and every decision is fully logged. (docs.devolutions.net)
Teams typically use check-out approvals for high-risk accounts such as domain admins, where a ticket number and manager approval are required before Remote Desktop Manager or Devolutions Gateway will open the session, helping align privileged access with internal controls.
Share your feedback