Below is the list of permissions under Windows Agents Resource Pools.
Credential Provider
Users must use the Credential Provider provided by Privileged Account Manager Agent installation.
Users must use the Credential Provider provided by Privileged Account Manager Agent installation.
Direct RDP
Users can directly login into the Windows system using own accounts.
Privilege Elevation is not applicable.
Web Agent RDP
Users need to login into Privileged Account Manager's User Console.
Users' are authenticated by authentication sources configured in Privileged Account Manager.
Privileged Applications
Users can directly login into the Windows system using own accounts. Users need to request a specific application to run with privileges supplied by Privileged Account Manager, using the Run as privileged user option, that appears when you right click on any application.
The table highlights the differences of each permissions with respective options and user experience:
|
Permissions |
Authentication |
Secondary Authentication |
Privilege Elevation |
Mode of Access |
Mode of session |
Session Capture |
Video Capture |
Enhanced Access Control |
Application Command Lists |
|---|---|---|---|---|---|---|---|---|---|
|
Credential Provider |
Privileged Account Manager |
Yes |
Yes |
Thick Client |
RDP Session |
Yes |
Yes |
Yes |
NA |
|
Direct RDP |
Windows Authentication |
NA |
NA |
Thick Client |
RDP Session |
Yes |
Yes |
Yes |
NA |
|
Web Agent RDP |
Privileged Account Manager |
Yes |
Yes |
Web Browser |
RDP Session |
Yes |
Yes |
Yes |
NA |
|
Privileged Applications |
NA |
NA |
Yes |
Thick Client |
Requested Application |
Yes |
Yes |
NA |
Yes |