Prompt with list of PAM vault entries

Prompt with list of PAM vault entries

2 votes

avatar

Maybe I'm missing it but when I choose a privileged credential for a session it wants to force me to choose just one entry. If I make a vault to work around this I can get it to prompt with all the different PAM vaults. We'd like to have our PAM vaults structured to match customers and don't want to have to look at ALL the PAM vaults when opening a session but we also want to be able to choose from multiple privileged accounts instead of just one. We are able to do this with regular credentials just not with PAM vaults.

Basically, we want the PAM vault to act as a folder and then set that folder in relation to the session we want to connect.

Let me know if I'm missing something or if this is a feature that can be added. Thanks!!

All Comments (5)

avatar

Hi bwright,

Thank you for reaching out!

I assume you use Devolutions Server as the data source, right? If you do, it is already possible, here's the method I use:

  1. Create a "DVLS privileged account"
  2. Give it a name
  3. Add the server url to be your DVLS URL
  4. (optionally) check either "Use 'My account settings'" or "Use Windows Authentication".
    1. If you use the "My account settings" and all your users are using this entry, it'll always refer to their own setting configured in there.
  5. If you don't use "My account settings", configure your Username
  6. Finally, check "Always prompt with list"


Once the entry is created, you can link it to your session; when you launch it, it will result in RDM showing you all the PAM vaults and credentials you have access to.

Let me know if it works for you!

avatar

This works but pops up all the PAM vaults. I'd like to be able to specify which PAM vault it opens. For example, Server A only shows PAM Vault A and Server B only shows PAM Vault B so when connecting we don't have to scroll through all the different PAM vaults.

avatar

hi bwright,

Sorry, I missed that part.

Thank you for making the feature request! We've opened a ticket internally and we'll report back here when we have news.

Best regards,

avatar

I was also hoping to have PAM entries show up when we want users to be able to select form a list when connecting to something. The instructions provided and the same in the documentation seems like a really roundabout way of achieving this. Why not just have PAM entries show up in the windows that pops up when doing a 'normal' linked entry 'prompt on connection' as in the screenshot. Just have PAM Vault as separate type in there. This would be really useful when you need multiple PAM users because a user can only be checked out by 1 person at a time.


Screenshot 2025-06-05 114257.png

Screenshot 2025-06-05 114257.png

avatar

Hi rderousseau.

Thank you for your addition to this discussion.

I've noted in the internal ticket that you also wanted that feature.

Best regards,