docs/documentation/platform/pam/sessions/overview.mdx
Every time a person or an AI agent connects to an account through PAM, a session is created. The Sessions page shows all sessions, active and completed, so you can monitor what's connected and review what happened.
Go to Privileged Access Management → Sessions to see the session list.
| Column | What it shows |
|---|---|
| Account | Which account was accessed |
| Folder | Which folder it belongs to |
| User | Who connected: a user, or a machine identity shown by name |
| Status | Active, Ended, or Terminated |
| Started | When the session began |
| Duration | How long it lasted (or has been active) |
Click on any session to see its details and recording. A machine identity has no email address, so its sessions show Machine Identity wherever a person's email would appear.
Use the filters to find specific sessions:
The search bar finds sessions by account name, folder name, or the actor's name or email.
Active sessions show a Live indicator. While a session is active:
Click on a session to see:
If something shouldn't be connected (a security incident, a policy violation, someone stuck, or an agent doing more than you expected), you can terminate the session.
To understand how session recordings work and where they're stored:
<CardGroup cols={2}> <Card title="Session Recording" icon="video" href="/documentation/platform/pam/sessions/session-recording"> How sessions are recorded. </Card> <Card title="External Storage" icon="cloud" href="/documentation/platform/pam/sessions/external-storage"> Store recordings in your own S3 bucket. </Card> </CardGroup>