Privileged Access Management (PAM) platforms control, broker, and audit the use of elevated credentials — administrator, root, service account, cloud-privileged, and database-privileged access. Core capabilities include credential vaulting with automated rotation, just-in-time privilege elevation that eliminates standing admin rights, session brokering and session recording for compliance and forensics, secrets management for applications and service accounts, certificate lifecycle management, and Cloud Infrastructure Entitlement Management (CIEM) for the major cloud providers. Leading vendors include CyberArk, BeyondTrust, Delinea, Wallix, One Identity Safeguard, and Saviynt.