PAM vaults

PAM vaults are one of the key features of Devolutions Hub's privileged access management module. They are secure vaults that allow admins to manage their different privileged accounts.

PAM vault creation

Creating a PAM vault via the Devolutions Hub web interface is not that much different from creating a regular vault. In Administration – Vaults, click on Add (+), then Add PAM vault as shown in the image below.

PAM vault setup

Once this is done, the setup window for a new PAM vault should appear.

Start by entering a Name for the PAM vault (mandatory) and a Description (optional). Then, set its visibility:

• Default: Refers to the system-wide vault visibility set in Administration – Configuration & Security – System Settings – Vault.
• Private: A private PAM vault is not visible to users that do not have access to it. Thus, vault access requests cannot be performed. It can only be accessed on invitation.
• Public: A public vault is visible to all users of the data source, even to those who do not have access to it. A user can request access to the public vault.

Then, set the vault's PAM checkout policy:

And its PAM password rotation policy:

In the Password Settings, choose whether to use the provider's password template or select a custom one.

When clicking Add, the new PAM vault will be created. It can then be found in Administration – Vaults. The number of PAM vaults is also displayed at the top.

All the vaults can be accessed via the vault selector in the Navigation pane.