> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/pam-with-devolutions-cloud/pam-vaults.md).

# PAM vaults

PAM vaults are one of the key features of Devolutions Cloud's privileged access management module. They are secure vaults that allow admins to manage their different privileged accounts.

### PAM vault creation

Creating a PAM vault via the Devolutions Cloud web interface is not that much different from creating a regular vault. In ***Administration – Vaults***, click on ***Add (+)***, then ***Add PAM vault*** as shown in the image below.

![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub2288.png)

### PAM vault setup

Once this is done, the setup window for a new PAM vault should appear.

![](https://cdnweb.devolutions.net/docs/HUBB4007_2024_2.png)

Start by entering a ***Name*** for the PAM vault (mandatory) and a ***Description*** (optional). Then, set its visibility:

* ***Default***: Refers to the system-wide vault visibility set in ***Administration – Configuration & Security – System Settings – Vault***.
* ***Private***: A private PAM vault is not visible to users that do not have access to it. Thus, vault access requests cannot be performed. It can only be accessed on invitation.
* ***Public***: A public vault is visible to all users of the workspace, even to those who do not have access to it. A user can request access to the public vault.

{% hint style="info" %}
For more information on vault access and visibility, visit [Vault access in Devolutions Cloud](https://docs.devolutions.net/cloud/web-interface/vault-access/).
{% endhint %}

Then, set the vault's PAM checkout policy:

![](https://cdnweb.devolutions.net/docs/HUBB4008_2024_2.png)

And its PAM password rotation policy:

![](https://cdnweb.devolutions.net/docs/HUBB4009_2024_2.png)

In the ***Password Settings***, choose whether to use the provider's password policy or select a custom one.

{% hint style="warning" %}
When using a custom policy, make sure it follows the provider's password policies.
{% endhint %}

When clicking ***Add***, the new PAM vault will be created. It can then be found in ***Administration – Vaults***. The number of PAM vaults is also displayed at the top.

![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub2291.png)

All the vaults can be accessed via the vault selector in the ***navigation pane***.

{% hint style="info" %}
The next step is to add privileged accounts to the new PAM vault. Visit [Privileged accounts](https://docs.devolutions.net/pam/server/accounts/) for more information.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/pam-with-devolutions-cloud/pam-vaults.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.