> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# PAM sessions

> Review and end the connections that people and agents make to your accounts.

Each time a person or an [AI agent](https://infisical.com/docs/documentation/platform/pam/ai-agents/overview.md) connects to an [account](https://infisical.com/docs/documentation/platform/pam/accounts/overview.md), Infisical creates a session. The session records who connected, when, for how long, and what they did. To learn how a session starts and ends, see [Concepts](https://infisical.com/docs/documentation/platform/pam/concepts/overview.md).

## Who can see sessions

To see an account's sessions, you need the **Admin** or **Auditor** [role](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md) on the account or on its [folder](https://infisical.com/docs/documentation/platform/pam/folders/overview.md). The **Connector** and **Operator** roles let you launch sessions, but they don't let you see sessions on the **Sessions** page.

## View sessions

Go to **Privileged Access Management** > **Sessions**. The list shows each session's user, account, folder, start time, duration, and status.

To find a session:

* Search by account name, folder name, or the user's name or email
* Filter by status to show only **Active** or **Ended** sessions

If a [machine identity](https://infisical.com/docs/documentation/platform/identities/machine-identities.md) opened the session, the list shows **Machine Identity** in place of an email address.

### Session details

Select a session to open its details:

* The user's email and IP address, the folder, and the session's start time, end time, and duration
* The reason the user gave, if the account's [template](https://infisical.com/docs/documentation/platform/pam/templates/overview.md) requires one
* The [session recording](https://infisical.com/docs/documentation/platform/pam/sessions/session-recording.md) of what happened during the session

While a session is active, its recording updates as the user works, so you can follow what they do.

## Terminate a session

To end a session right away, such as during a security incident or when an agent does more than you expected, terminate it. You need the **Admin** role on the account or its folder.

**Step 1**

Go to **Privileged Access Management** > **Sessions**.

**Step 2**

On the row of the active session, select **Terminate**.

**Step 3**

Type `terminate` to confirm, then select **Terminate**.

Infisical disconnects the user or agent right away.

> [!WARNING]
>
> Terminating a session doesn't stop the user from launching a new one. To stop someone from connecting again, remove their [membership](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md) on the account or folder.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.