Privileged Access Management

GAccess PAM gives your team complete control over privileged accounts across servers, databases, cloud consoles, and network devices — without the complexity of legacy PAM solutions.

Key capabilities

• Credential vault — centrally store, rotate, and broker passwords and SSH keys so no human ever needs to know a credential directly.
• Session recording — every privileged session is recorded and indexed, giving you a full audit trail for compliance and forensic investigation.
• Just-In-Time access — grant temporary elevated permissions on demand. Access expires automatically, eliminating standing privileges.
• Password verification — confirm that stored credentials still match what is configured on the target system without changing anything.
• Unified audit log — every access request, approval, and action is captured in a tamper-evident log.

Documentation sections

Admin Guide

Everything an administrator needs to deploy, configure, and operate the PAM module.

Topic	Description
Target Account Management	Verify and rotate credentials stored in the vault against their target systems
Verifying Credentials	Confirm a stored credential still matches the target system without making changes
Rotating Credentials	Automatically generate and apply new credentials, keeping the vault in sync
Configuring Rotation Policies	Define schedules, failure thresholds, and credential rules for verification and rotation
Identity Providers	Connect GAccess to your identity platform for authentication and user lifecycle management
Entra ID	Configure Microsoft Entra ID for single sign-on and automated user provisioning
Active Directory	Connect an on-premises Active Directory domain using the GAccess AD Agent
Gateway Overview	What Gateways are, how they work, and their lifecycle states
Gateway Deployment	Deploy and enroll a new Web Gateway
Gateway Management	Monitor, edit, revoke, and delete Web Gateways
Exponential Rules	Grant access by resource attributes, so new resources are covered automatically
API Reference	REST endpoints for automation and integrations

User Guide

End-user workflows for adding resources and launching sessions.

Topic	Description
Adding Credentials	Store passwords, private keys, and API keys securely in the vault
Adding Servers	Register servers, network devices, and infrastructure assets as targets
Adding Applications	Register web applications so users sign in without seeing the underlying credentials
Connecting to Remote Targets	Overview of connection methods — browser, SSH client, RDP client
Web Connection	Using the browser-based session, clipboard, file transfer, and session controls
Native SSH Client	Connect to Linux and Unix servers through the Gateway using your preferred SSH client
Native RDP Client	Connect to Windows servers through the Gateway using your preferred RDP client