> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/pam-with-devolutions-server/pam-permissions.md).

# PAM permissions

From Devolutions Server v.2024.3 on, PAM vault management settings practically mirror those of regular [Vault management](https://docs.devolutions.net/server/web-interface/administration/configuration/system-settings/#vault-management), with a few notable exceptions:

* Default permission sets are different (see image below).
* The ***My account settings*** and ***Security settings*** sections are not available in ***PAM vault management***.
* In ***Default permissions***, the ***More*** tab is replaced by a ***PAM*** tab, which lists PAM–only settings and options (see table below).

{% hint style="info" %}
Note that PAM permission sets are not applicable to non–PAM vaults, and vice-versa.
{% endhint %}

![](https://cdnweb.devolutions.net/docs/DVLS4092_2024_3.png)

### PAM folder-specific permissions

Permissions can also be set for individual PAM folders by heading to ***Properties*** – ***Security*** – ***Permissions***.

![](https://cdnweb.devolutions.net/docs/RDMW4240_2025_1.png)

#### PAM–only settings

|                              |                                                                                                                                                      |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Reset password**           | Allow every user (or specific ones if ***Custom*** is chosen) to reset PAM entries' passwords in accordance with their ***Password template mode***. |
| **Approve checkout request** | Allow every user (or specific ones if ***Custom*** is chosen) to approve demands for checkout on PAM entries.                                        |
| **Force checkin**            | Allow every user (or specific ones if ***Custom*** is chosen) to force other users to checkin PAM entries.                                           |
| **Checkout**                 | Allow every user (or specific ones if ***Custom*** is chosen) to checkout PAM entries.                                                               |
| **Read logs**                | Allow every user (or specific ones if ***Custom*** is chosen) to read PAM entries' logs.                                                             |

#### PAM default permission sets

Here is a table summarizing each default permission set in ***PAM vault management***:

![](https://cdnweb.devolutions.net/docs/DVLS4093_2024_3.png)

#### See also

* [Devolutions Academy - Simplifying Privileged Access Management with Devolutions PAM](https://academy.devolutions.net/student/path/2007290/activity/3070848)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/pam-with-devolutions-server/pam-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.