Privileged access management and separate admin accounts

Some accounts can do far more than others. Administrator and root accounts can install software, change security settings, create users, read any file and erase logs. Service accounts may run critical applications with broad rights. These are privileged accounts, and attackers target them because controlling one often means controlling the whole environment. Privileged access management (PAM) is the set of practices and tools that protect, limit and monitor these accounts.