Credential type "DVLS Privileged Account" support in Web version of Devolutions Server

Credential type "DVLS Privileged Account" support in Web version of Devolutions Server

2 votes

avatar

When using the PAM module in combination with password rotation it's very likely you will use the credential type DVLS privileged account for most of your assets in Remote Desktop Manager.

This cedential type is not available/working in the web version of Devolutions Server. Because of this the web version of Devolutions Server is not usable.

Can this be added in Devolutions Server?

All Comments (10)

avatar

Hello,

Thank you for your request. Could you elaborate on your use case and why you use the DVLS privileged account entry ? That entry is mainly used to access a PAM account from a different Devolutions Server than yours. If you want to use a PAM account from your system to open a session, you can point directly on it by configuring the credentials with Privileged account



Would it work for you to configure your entry that way instead of using the DVLS privileged account entry type ?

Best regards,

François Dubois

f9cfec60-c482-4689-909a-ebe380cacf01.png

avatar

We use this in combination with the PAM module of Devolutions. Every administrator have a personal admin account configured in PAM. Because of this the DVLS privileged account option is needed.

avatar

Hello,

Thank you for your answer. Does it mean that every administrator has their own account in their user vault and you configure your session entries with "Find by name (user vault)"? And would you like it to be possible to launch sessions in the web interface with that configuration, am I right? If this is your situation, I understand why you would like to support that entry type. I will analyze what could be possible.

However, I'm not sure if this is the right way to be configured for what you are trying to achieve. If your admins have only one privileged account, you could use "My privileged credentials" supported in the web interface since 2025.1: https://blog.devolutions.net/2025/03/whats-new-in-devolutions-server-20251/#save-my-privileged-credentials-and-my-personal-credentials-in-devolutions-server



That way, all admins could configure their privileged account, and that account will be used to launch sessions. Does it help to achieve what you need ?

Best regards,

François Dubois

6f6d4f5a-3ee0-4855-81d2-5ddedceb5c77.png

avatar

No, Every administrator has their own account in the PAM vault and this is configured in RDM with the My privileged account setting. In the web version you get the message this credential type is not supported.

avatar

Hello,

Thank you for your answer. You're right. To be honest, I thought it was supported, but after running a few tests, I realized it is not. I apologize for any confusion. We will work on supporting that feature. Initially, we will support it only if you configure your DVLS privileged account with the option "Use active DVLS data source when available" checked. I assume it is checked in your situation. Otherwise, the server would have to open a new connection with a different DVLS server, and that part could be harder to implement.



We are currently planning our next development cycle, and I will try to fit it into our roadmap.

Best regards,

François Dubois

a9f020d3-1dbd-4f40-90af-c52d6e2a27d4.png

avatar

Hello! I just wanted to see if there were any updates on this. This is a fairly important use case for us and the article linked before seems to imply it is supported, but I haven't been able to get "My privileged credentials" to work via the web launcher.

Article linked above: https://blog.devolutions.net/2025/03/whats-new-in-devolutions-server-20251#save-my-privileged-credentials-and-my-personal-credentials-in-devolutions-server

And what I get when trying to use the credential type on the web portal:

Screenshot 2025-09-30 at 2.36.29 PM.png
Thank you so much for any updates & assistance!

Screenshot 2025-09-30 at 2.36.29 PM.png

avatar

Hello,

The article that you linked mentions that we save personal credentials and privileged credentials in the DVLS data source. It also mentions that it allows new functionality such as launching web sessions configured with "My personal credentials". All that is true, but unfortunately, it works only for entries supported by the web interface. You can't get the password for a "DVLS privileged account" entry today in the web interface. I'm bumping the priority to see what could be done because we used to integrate well with our own product.

Best regards,

François Dubois

avatar

Any update on this? I would really like to just set credentials to "My Privileged Account" or "My Personal Credentials" and have it work for all my users in the desktop or web client.

avatar

Hello,

This item is still scheduled on our side.
We will inform you as soon as it becomes available.

Thank you once again for your patience and for contacting us.
Best regards

Marc-Andre Bouchard

avatar

Marc-Antoine Dubois