PAM Resources

Guide for using PAM Resource Records in the Keeper Vault for privileged access functionality.

Overview

KeeperPAM Resource records are special record types designed to organize and store information of your target infrastructure, machines, web apps, workloads and user accounts.

• What's a Record Type?

KeeperPAM Record Types

In your Keeper Vault, resources that represent your infrastructure are created with the following Record Types:

PAM Record Type	Target Infrastructure
PAM Machine	Windows/macOS/Linux Machines, EC2 Instances, Azure VMs, etc.
PAM Database	MySQL, PostgreSQL, SQL Server, MongoDB, MariaDB, Oracle
PAM Directory	Active Directory, OpenLDAP
PAM Remote Browser	Web-based Applications, internal apps or cloud apps
PAM User	Any local user, remote user, database credential or admin account. PAM User records can also be configured for scheduled or on-demand password rotation.

Record Linking

The PAM User record is special because it can be linked from the other resources. This way, you can share access to a Machine, Database, Directory or Remote Browser without sharing access to the underlying credentials.

Creating a PAM Record

From the Vault UI, click on Create New and select either Rotation, Tunnel or Connection.

Create a new PAM Resource Record

Alternatively, you can right-click on a folder and select Rotation, Tunnel or Connection.

Right-click to create PAM Resource Records

The "Target" selection will determine what type of record will be created.

Selecting a Target

Bulk Import of Resources

There are several ways of creating resources in the Keeper vault.

• Manually in the Keeper Vault

• Using Keeper Discovery

• Bulk Import with Keeper Commander

Manually in the Keeper Vault

As described in this section, you can create PAM Machines, Databases, Directories, Remote Browsers and Users directly in the Keeper Vault.

Using Keeper Discovery

KeeperPAM can perform discovery on a network or cloud resource to find all associated machines, accounts, etc. Visit the Discovery section to learn more.

Bulk Import with Keeper Commander

Keeper Commander CLI can perform import of resources based on a template. See this Importing PAM Resources example for a step by step guide. See the pam project import command for more advanced import options.

The following sections will describe each of the PAM resources.