Reference Guide

Session Manager

The Kron PAM Session Manager is a core component designed to secure, monitor, and control privileged access across your IT environment. It enables organizations to enforce least privilege policies by logging user activity, monitoring live sessions, and applying granular access control rules in real time.

Session Manager operates primarily in an agentless proxy mode, which allows it to intercept and manage privileged sessions without requiring any software to be installed on the target systems. This approach simplifies deployment and maintenance while ensuring robust oversight of remote and internal access to critical systems.

For use cases involving endpoint-level control and policy enforcement, Kron PAM also supports an Endpoint Privilege Management (EPM) agent. The EPM agent provides deeper integration with endpoints, offering advanced capabilities such as application control, privilege elevation, and local command restrictions. For more information on agent-based functionality, please refer to the Agent Reference Guide.