When you add a single or multiple shared keys to a domain, users can checkout those keys simultaneously based on how many users can access the shared key.
You can use the shared key feature to share any type of value with single or multiple users. The following are the scenarios to manage shared keys:
Multiple keys for multiple users: You can define multiple keys in a domain for multiple users and each shared key can have maximum user limit. During the checkout process, multiple users can checkout any of the available keys. The same key can be used multiple times till it reaches the user limit. For allowing other users The users must check in the key. To configure multiple users, refer Types of Accounts Discovered.
Single key for multiple users: You can define a single key in a domain for multiple users and assign the maximum user limit. During the checkout process, multiple users can checkout the same key till the key usage reaches the maximum limit. After reaching the maximum usage, Privileged Account Manager does not allow further checkout of the keys. A succeeding user can check out the key only after a user checks in the key.
Privileged Account Manager does not reset the values for the shared key when users check in the key. This is called key check-in.