Portal
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
We’re excited to introduce the latest version of Devolutions PAM — our second major update of the year: version 2025.2! This release includes several powerful new features designed to support more account types and improve flexibility, making it easier to manage privileged accounts across diverse systems. Let’s take a look at what’s new and how these updates can help streamline your workflows.
Optional check-in/check-out PAM accounts in DVLS
To support a variety of workflows, you can configure a PAM account to bypass the check-out requirement for password retrieval. This allows you to view the password without triggering a reset — ideal if you need quick access but prefer to schedule password resets overnight or on demand.
To enable this behavior, ensure the vault-level check-out policy is set to None. Then, simply view the password from the PAM account as needed.
Azure AD / Entra ID PAM provider (Hub)
As part of our ongoing effort to expand provider support for the recently released Hub PAM provider, you can now connect to Azure and rotate accounts. This functionality is especially valuable for managing users, particularly service accounts.
On-premise Active Directory PAM provider (Hub)
You can now use the Hub PAM provider with on-premises Active Directory, as shown above. This functionality relies on the Devolutions Hub Services, which allows the cloud-based Hub to connect to your local environment. With this enhancement, you can manage your on-premises AD accounts directly from Hub. In addition, just-in-time elevation is available for AD users as well.
DVLS and Hub AWS PAM provider
Featured in both DVLS and Hub, the new Amazon Web Services (AWS) PAM provider allows you to rotate passwords and token accounts within your AWS environment. Simply choose the search method and select the accounts to rotate them quickly and efficiently.
PostgreSQL PAM provider (DVLS and Hub)
Rounding out the new PAM providers, we’ve introduced a PostgreSQL database PAM provider. With this addition, you can now generate audit logs for PostgreSQL account password changes, something PostgreSQL does not support natively. By using this new PAM provider, you can significantly improve audit compliance.
Consolidated Account lifecycle policy section for password rotation and propagation sections
To further optimize workflows, we've consolidated the password rotation and propagation settings into a unified Account lifecycle policy section. This change makes it easier to locate and configure all related settings in one place.
Initial release of privilege elevation and delegation (PEDM)
Available in Devolutions Agent v2025.1.6 and later, the new PEDM functionality is designed to support agent-assisted local administrator elevation of processes for users. Controlled by PEDM policies within RDM, this initial implementation will expand over time to include additional capabilities.
To get started, simply:
1 - Create a new PEDM profile.
2 - Assign the PEDM profile to a user account.
3 - Select the profile to activate it.
4 - Start an elevated process.
Tell us what you think
We’d love to hear your thoughts on the new features in Devolutions PAM 2025.2! How do these updates affect your daily operations? Have you found a particular feature to be especially useful? Share your feedback with us in the comments section below or on our forum, and let us know how we can continue to enhance your experience.
About Devolutions PAM
Easy to implement and scalable, Devolutions PAM is the ideal privileged access management (PAM) solution for small to medium-sized businesses (SMBs) looking to enhance their security posture while maintaining operational efficiency. Designed to protect, control, and monitor access to critical assets within any IT infrastructure, Devolutions PAM provides a powerful set of tools for managing privileged credentials and sessions, offering deep security, visibility, and accountability across the enterprise. Available as a module for Devolutions Server or Devolutions Hub Business and as a seamless integration with Remote Desktop Manager, Devolutions PAM ensures robust access control, mitigates privileged account risks, and secures remote sessions — all while being reasonably priced for SMBs.
