Privileged Account Manager audits all the activities performed in the application SSO session. Based on the rule configuration, the report can show keystroke and video audits.
Privileged Account Manager generates the following reports for every application SSO session using direct access mode:
Report for launching Windows direct RDP session
Report for launching the application as a privileged user
Report for the operations performed in the application
To view activities performed in the application SSO session:
Click Reports > Command Control Reports.
All the report instances are displayed. You can interpret the SSO reports columns as follows:
User: User who has logged into the remote server.
Host: Remote server where the application is launched.
RunAs: Application user who has logged into the application.
RunHost: Host to which the application is connected.
Command: Application.
Double-click the appropriate report.
(Conditional) If you have configured video capture, click Linked Session > Output > Playback to view the keystrokes and play audit video.