Delinea Privileged Access Service Reviews

I have been working in the PAM space for the eighteenth year. All the PAM solutions have common use cases such as Privileged password management. PAM is divided into three categories: Privileged identity management, endpoint privilege manager for endpoint privilege management, and secret management for DevOps secret measures.

Secret management is currently a top priority for any PAM tool, with a shift from on-premises solutions to cloud-based solutions. The Cloud Identity Manager and tools related to the CI/CD pipeline are being largely adopted. The priority for major OEMs is now cloud-based solutions, ensuring security and efficiency.

I typically use Delinea Privileged Access Service within my IT infrastructure management for consulting, to secure privileged access, recording, session recording, password vault, etcetera.

The most common solution I find effective for protecting sensitive data is the most common features of Delinea Privileged Access Service.

I am providing deployment services as an integrator in my organization.

The solution is used for privileged access control. It is used to provide controlled access to the SREs and data center administrators to access the target environment. Instead of logging directly to a server, they must go through Delinea. It helps control who is logging into which server and what privileges they have.

The solution provides secure access to environments. We can decide who can access the environment and what privileges they should have. The controls and checks are enabled in Delinea before a person logs into a target environment. We use custom rules and put them across different secrets. We can create multiple secrets and map users into secrets.

The solution is integrated into an Azure AD system. We define the security policies within the AD system. The policies are authenticated through the AD system but authorized through Delinea to log in to the target environment. When the users go through AD, there is a two-factor authentication. There is one more layer of authentication when they go through Delinea.

We implement workflow-based auto approval. Personas cannot log into a targeted server with the configuration item or secret name alone. To access the target environment, a person must have a valid ticket in the ticketing system, and the ticket must be under their name. The ticket should be active and should not be a closed ticket. Such rules are enabled using the PAM capabilities very effectively to bring more controls and checks within the target environment.

Monitoring features are similar to recording sessions. Recordings can be enabled only for targeted and critical systems. Only the secured critical configuration items would be enabled with the recording. The recordings are automated to deliver details of who accessed the environment, what incident or service request they accessed, the activity they did, and the commands they executed. These details are generated as a report and can be sent directly to the customers.

We work with the on-prem version of the product because the cloud version is blocked here in Morocco.

The solution is flexible. This means we have many functionalities we can show to the end user. And though the solution is somewhat expensive, when we show the functionalities to the end user, they get the necessary budget for the product.

The solution makes it easy to securely manage passwords. All of our tech, all of our servers, and everything globally are managed, so our techs do not have access to the passwords; the server does.

There are benefits in the security realm. We use Delinea at an enterprise level. I imagine there are productivity gains, but moreover, it's the security. We don’t enable staff to see the passwords of boxes but it's all being tracked and logged now.

Delinea Privileged Access Service is being used for access management. We can manage the user logins from the SQL server.

When we have customers that have sensitive data, such as governments we typically deploy the solution on-premise and avoid the cloud.

The most valuable feature of Delinea Privileged Access Service is we can use the server as a jump host. It is simple to manage the accounts on the system.

I used Delinea Privileged Access Service in a trial environment where I had some endpoints, devices, and servers. I created some privileged accounts and onboarded them with the help of Delinea Privileged Access Service. I tried product features attached to the login area, monitored some recorded sessions, and saw that everything worked properly.

With Delinea Privileged Access Service, when installing the identity connectors to configure with AD, the configuration was not happening properly. The aforementioned area in the product can be considered for improvement.

Compared to CyberArk, Delinea Privileged Access Service should work in the documentation area since I remember that when I wanted to troubleshoot some issues, I couldn't find any forums. I couldn't configure the identity connector properly, so there should be some forums.

We primarily use this solution to utilize local IDs and fix up specific endpoints. In addition, we use the solution to identify the people using our service accounts and how they use them. 

The most valuable feature is the author's discovery of assets because it helps keep track of inventory. Currently, our inventory is managed manually, so the author discovery feature is beneficial.