Record Control
Privileged Access Management provides a robust set of permissions that can be granted to users or groups (Principals) in order to control the level of access they have to objects and areas of the software.
Record Control provides access to objects (Folders and Records) located in the Records area of PAM.
Viewer
The Viewer roles grants View Only access to the object.
Unlock
Viewer plus the ability to Unlock (view) secured fields like Passwords, Secrets and Certificates.
Editor
Unlock plus the ability to Edit the object as well as its associated Formula and to view its Session History, Video Recordings and Keystroke and Clipboard Events.
Manager
Editor plus the ability to Create or Delete objects (folders and records). Manager cannot create (share) or modify object permissions.
Owner
Full Control of the object. This includes creating new objects, modifying or deleting existing objects, sharing access (permissions), Audit Events, History and Session Termination.