Allow Technicians to have access to PAM
Right now to use PAM my techs need to be an admin for Screen Connect. Why can't a technician have access to allow privileged access requests?
Right now to use PAM my techs need to be an admin for Screen Connect. Why can't a technician have access to allow privileged access requests?
Hi! We're looking at implementing the concept of a PAM Admin who would not have access to the Admin page in ScreenConnect, but could approve and deny requests and also view the PAM dashboard and generate some reports.
Do you feel like that secondary PAM admin role is sufficient, or would you also see the need for further granularity in a PAM Technician role that could maybe only approve UAC elevation requests but not administrative logons? Or maybe approve everything except their own elevation requests?
Thanks for the feedback!