> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/concepts/privileged-account.md).

# Privileged account

A **privileged account** in Devolutions PAM is an account used to perform highly privileged actions. It requires strong protection due to its extensive access. These accounts often have control over sensitive systems, data, or user privileges, making them primary targets for cyber threats. In addition to IT personnel, non-IT users in roles like legal or finance may also hold privileged accounts due to their access to sensitive operations or data.

Using Devolutions PAM, privileged accounts are stored securely in PAM-specific vault, with access managed through role-based access control and multifactor authentication (MFA). This ensures privileged operations are logged, monitored, and [compliant](https://docs.devolutions.net/pam/concepts/compliance-reporting/) with best security practices.

Privileged accounts include various types, each serving a specific purpose:

* **Application accounts** manage background software operations without direct user involvement.
* **Domain administrator accounts** control Active Directory domains and user permissions.
* **Emergency accounts** provide temporary elevated access during emergencies or administrator lockout.
* **Local administrator accounts** oversee individual Windows without Active Directory access.
* **Root and administrator accounts** grant elevated access to systems for software installation and configuration.
* **Service accounts** operate background processes with borad privileged (rarely used by humans).
* **System accounts** manage OS-level operations with limited, predefined roles.

#### Privileged account aliases

* Elevated account
* Admin account
* Superuser account

#### Related topics

* [Privileged accounts (Devolutions Server)](https://docs.devolutions.net/pam/server/accounts/)
* [Privileged accounts (Devolutions Cloud)](https://docs.devolutions.net/pam/pam-with-devolutions-cloud/privileged-accounts/)

#### See also

* [Checkout process](https://docs.devolutions.net/pam/server/checkout-process/approve-checkout/)
* [Glossary of Common Privileged Access Management (PAM) Terms](https://blog.devolutions.net/2021/01/glossary-of-common-privileged-access-management-pam-terms/)
* [Need Cybersecurity Insurance? Then You Probably Need PAM, Too](https://blog.devolutions.net/2023/10/need-cybersecurity-insurance-then-you-probably-need-pam-too/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/concepts/privileged-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
