> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Privileged Access Management (PAM)

> Let people and AI agents connect to your infrastructure without giving them its credentials.

Infisical Privileged Access Management (PAM) lets you securely manage access to your databases, servers, clusters, and cloud accounts. It lets you give people and [AI agents](https://infisical.com/docs/documentation/platform/pam/ai-agents/overview.md) access without ever letting them access the actual credentials. Infisical records every session, and you decide who can connect to each account.

## Get started

> [card] [Quickstart](https://infisical.com/docs/documentation/platform/pam/quick-starts/launch-first-session.md)
>
> Connect to a PostgreSQL database through Infisical PAM.

> [card] [Concepts](https://infisical.com/docs/documentation/platform/pam/concepts/overview.md)
>
> Learn how Infisical PAM controls access to your infrastructure.

> [card] [Session lifecycle](https://infisical.com/docs/documentation/platform/pam/concepts/session-lifecycle.md)
>
> Learn what happens from the moment someone connects to an account until the session ends.

> [card] [Architecture](https://infisical.com/docs/documentation/platform/pam/architecture.md)
>
> Learn how PAM connects people and agents to your infrastructure through a Gateway.

## Accounts

Add the databases, servers, clusters, and cloud accounts that people connect to:

> [card] [Accounts](https://infisical.com/docs/documentation/platform/pam/accounts/overview.md)
>
> Store the credentials for a database or server that people and agents connect to through Infisical PAM.

> [card] [Add an account](https://infisical.com/docs/documentation/platform/pam/accounts/add.md)
>
> Store the connection details and credentials for a database or server in PAM.

> [card] [Connect to an account](https://infisical.com/docs/documentation/platform/pam/accounts/connect.md)
>
> Open a session on an account from your browser or the Infisical CLI.

> [card] [View credentials](https://infisical.com/docs/documentation/platform/pam/accounts/view-credentials.md)
>
> Reveal the password or key stored for an account.

> [card] [Manage an account](https://infisical.com/docs/documentation/platform/pam/accounts/manage.md)
>
> Change an account's details, access, and settings after you add it.

> [card] [Account types](https://infisical.com/docs/documentation/platform/pam/accounts/account-types)
>
> Find the setup guide for each database, server, cluster, and cloud provider that PAM supports.

## Access control

Decide who can connect to each account, and which rules and approvals apply:

> [card] [Access control](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md)
>
> Control who can manage PAM and who can connect to each account.

> [card] [Folders](https://infisical.com/docs/documentation/platform/pam/folders/overview.md)
>
> Organize PAM accounts and control who can access them.

> [card] [Account templates](https://infisical.com/docs/documentation/platform/pam/templates/overview.md)
>
> Set the rules for connecting to the accounts that use a template.

> [card] [Access requests](https://infisical.com/docs/documentation/platform/pam/access-requests/overview.md)
>
> Require approval before a member can use a sensitive account.

> [card] [Break-glass access](https://infisical.com/docs/documentation/platform/pam/access-requests/break-glass.md)
>
> Let named responders grant themselves access in an emergency.

## AI agents

Let AI agents work with your infrastructure through PAM:

> [card] [AI agents](https://infisical.com/docs/documentation/platform/pam/ai-agents/overview.md)
>
> Give an AI agent access to your databases and servers without giving it a credential.

> [card] [Run an agent](https://infisical.com/docs/documentation/platform/pam/ai-agents/run.md)
>
> Start an AI agent with access to the PAM accounts its task needs.

> [card] [Agent instructions](https://infisical.com/docs/documentation/platform/pam/ai-agents/instructions.md)
>
> Tell an AI agent which PAM accounts it can use and how to reach them.

> [card] [Run unattended](https://infisical.com/docs/documentation/platform/pam/ai-agents/unattended.md)
>
> Run an AI agent as its own machine identity.

> [card] [Review and stop an agent](https://infisical.com/docs/documentation/platform/pam/ai-agents/review.md)
>
> Check what an AI agent did with your accounts and remove its access.

## Credential rotation

Change the passwords stored in PAM on a schedule:

> [card] [Credential rotation](https://infisical.com/docs/documentation/platform/pam/credential-rotation/overview.md)
>
> Change the passwords of your PAM accounts on a schedule.

## Monitoring

Review what people and agents did with your accounts, check that stored credentials still work, and find accounts on your systems to import:

> [card] [Sessions](https://infisical.com/docs/documentation/platform/pam/sessions/overview)
>
> Review and end the connections that people and agents make to your accounts.

> [card] [Session recording](https://infisical.com/docs/documentation/platform/pam/sessions/session-recording.md)
>
> Review what happened during each session on your accounts.

> [card] [External storage](https://infisical.com/docs/documentation/platform/pam/sessions/external-storage.md)
>
> Store session recordings in an S3-compatible bucket that you own.

> [card] [Auditing](https://infisical.com/docs/documentation/platform/pam/auditing.md)
>
> Track who accessed and changed what across PAM.

> [card] [Credential health](https://infisical.com/docs/documentation/platform/pam/credential-health/overview.md)
>
> Check on a schedule that the credentials stored for your PAM accounts still work.

> [card] [Discovery](https://infisical.com/docs/documentation/platform/pam/discovery/overview)
>
> Find accounts on your systems and import them into PAM.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.