The Privileged Access Manager (PAM) enterprise service has been implemented at UBC to create secure access to privileged accounts (root and system administrator accounts). The PAM solution comprises a suite of cybersecurity strategies and technologies used to exert control over the privileged access and permissions for users, accounts, processes, and systems across the IT environment at UBC.
By dialing in the appropriate level of privileged access controls, PAM will help UBC condense its attack surface and mitigate the damage arising from external attacks as well as from insider malfeasance and human error.
Features and Benefits
- Provides an enterprise solution for storing privileged accounts and workflows to access these privileged accounts
- Improved security by generating randomized passwords on a regular basis, no longer requiring passwords to be changed when IT staff leave UBC
- Allows for certification on privileged accounts
- Eliminates passwords from being stored in clear text for scripts
Requirements and Eligibility
- Submit a ServiceNow request to implement Privileged Access Management (PAM). You will be contacted to setup an initial meeting to discuss your requirements and implementation.
- A workstation with a web browser
- An Enterprise Active Directory (EAD) admin account
Price
Free
Audience
- The target audience for this solution is any IT Service Owner or IT Administrator at UBC. A point to note is that PAM is not to be confused with personal password solutions like LastPass or 1Password and is not available to those who are not in technical roles.
- Service owners can implement Privileged Access Management (PAM) for their services
- Your Server integrated with Privileged Access Management (PAM) and delegated
Getting Started
- Contact the Identity & Access Management (IAM) team to set up an initial discussion and demonstration.
- Review prerequisite documentation to understand the steps you and/or your team members may need to take before using the tool.
- Gather the information required as stated in the prerequisite documentation and fill out the PAM intake form with support from IAM .
- Access to the Privileged community can be requested using this application form. All applicants must have an established IT, security, privacy, or risk management relationship within UBC. Applicants are reviewed and approved by the CISO with the advice of the UBC Cybersecurity leadership team.
- Once the IAM team has received your completed information, they will begin building out the platform for your team.
- Upon completion of platform creation, IAM will provide you with a client integration guide that details step-by-step instructions for how to begin your integrations.
- IAM will contact you to provide support and self-integration instructions.
Learn More
Learn more about why we need Privileged Access Management
Get Help
For support requests please submit a ServiceNow request