Privileged account management (PAM) is a part of identity and access management (IAM) that deals exclusively with the protection of privileged accounts in an enterprise, including those (default and IT defined) of operating systems, databases, servers, applications, virtual machines, networking devices.
These privileges accounts also cover generic / shared interactive and non interactive 
service accounts, human user accounts having privilege access on endpoints. 
Privileged account management is also called Privileged Identity Management.

Cyberi3secure we were able to successfully  accomplished  the following:

• Privilege Account Management provides the following capability 
  

1. Secret storage (vault) for storing credentials/secrets
2. Policy-Driven Automatic Password Rotation 
3. Manual Password Rotation 
4. Auto-detection of vaulted account password change on endpoint directly & enforcing password re-conciliation with the Vault 
5. Logical containers/safes (Bank like lockers) provide segregated storage which facilitates IT, to store different credentials as per ownership/endpoint type, and helps in controlling user access management 
6. Additional policy-driven controls like dual approvals for password retrieval, exclusive/one-time password. 
7. Audit at all levels. 
8. Inbuilt auto-discovery/detection for privilege accounts discovery, scanning domain connected machines according to a defined source, such as Active Directory.  

• Different Types of Privilege Accounts 

1. Administrator on a Windows server 
2. Root on a UNIX server 
3. Cisco Enable on a Cisco device 
4. Sys/system/dbsnmp on Oracle Database 
5. SA accounts on MSSQL Database 
6. AWS, Azure IAM users accounts 
7. Active Directory secondary Admins accounts for IT Administrators (Humans) 
8. Interactive or non-interactive generic / shared user and service accounts 

• Advantage of Effective Privilege Account Password Management 

1. Credential theft prevention 
2. Stopping lateral movement 
3. Stopping Privilege escalation 
4. Secured credentials 
5. Only authorized users having access 
6. Account ownership and Individual accountability 
7. Audit Trail for compliance