Back to Infisical

Sessions

docs/documentation/platform/pam/sessions/overview.mdx

0.162.192.7 KB
Original Source

Every time a person or an AI agent connects to an account through PAM, a session is created. The Sessions page shows all sessions, active and completed, so you can monitor what's connected and review what happened.

Viewing Sessions

Go to Privileged Access Management → Sessions to see the session list.

ColumnWhat it shows
AccountWhich account was accessed
FolderWhich folder it belongs to
UserWho connected: a user, or a machine identity shown by name
StatusActive, Ended, or Terminated
StartedWhen the session began
DurationHow long it lasted (or has been active)

Click on any session to see its details and recording. A machine identity has no email address, so its sessions show Machine Identity wherever a person's email would appear.

Filtering

Use the filters to find specific sessions:

  • Status — Active, Ended
  • Account or Folder — Narrow to specific resources
  • User — Sessions by a specific person or machine identity
  • Date range — Sessions within a time period

The search bar finds sessions by account name, folder name, or the actor's name or email.

Active Sessions

Active sessions show a Live indicator. While a session is active:

  • Logs update in real-time
  • You can monitor what's happening
  • You can terminate the session if needed

Session Details

Click on a session to see:

  • Session info — who, what, when, duration, IP address
  • Session logs — commands (SSH) or queries (PostgreSQL) executed
  • Recording playback — review everything that happened

Terminating Sessions

If something shouldn't be connected (a security incident, a policy violation, someone stuck, or an agent doing more than you expected), you can terminate the session.

  1. Find the active session
  2. Click on it to open details
  3. Click Terminate
  4. Confirm
<Warning> Whoever is connected is disconnected immediately, person or machine. Use this for emergencies; normal sessions should end naturally. </Warning>

Next Steps

To understand how session recordings work and where they're stored:

<CardGroup cols={2}> <Card title="Session Recording" icon="video" href="/documentation/platform/pam/sessions/session-recording"> How sessions are recorded. </Card> <Card title="External Storage" icon="cloud" href="/documentation/platform/pam/sessions/external-storage"> Store recordings in your own S3 bucket. </Card> </CardGroup>