The PAM solution module aims to govern what runs on enterprise machines, not just manage who gets into them, combining privileged access and everyday connections in one workflow

, /PRNewswire/ — Devolutions, a global leader in secure and accessible IT management solutions, today announced major updates to its Devolutions platform with new device enrollment and UniGetUI-powered centralized software management features, marking the first phase of its endpoint privilege management roadmap. The new features will enable IT teams to enroll devices from their existing mobile device management (MDM) solutions and centrally approve, install and update software without granting local administrator rights.

The new capabilities extend Devolutions’ existing privileged access management (PAM) functionality beyond managing who can access enterprise systems to help IT teams govern the software running on them. Designed to work alongside Microsoft Intune, the new functionality will allow administrators to view enrolled devices in the same workspace they use for PAM and manage software across major package managers. By bringing these functions together, Devolutions aims to simplify everyday IT operations while reducing unnecessary administrator privileges.

The expansion builds on recent enhancements to Devolutions PAM, which is the first PAM solution to combine privileged access management and remote connections in one workflow. Unlike traditional PAM solutions that can take months to deploy, Devolutions PAM is designed to deploy in hours, giving IT teams enterprise-grade security controls without lengthy implementation projects. The company’s focus on productivity is reflected in a recent customer survey of 1,372 users conducted by Devolutions, in which Remote Desktop Manager users reported saving an average of 5.7 hours per week.

“PAM has historically been built for large security teams with big budgets and months to spare, but that’s not how IT teams work,” said Devolutions CEO David Hervieux. “As cyber insurers and auditors increasingly expect PAM coverage, we’re giving IT teams and MSPs controls they can roll out in hours and use every day without slowing down. Extending our platform is a natural next step in making enterprise-grade security practical for teams of every size.”

Enterprise-Grade PAM Built for Everyday IT Operations

The upcoming device enrollment and software management capabilities build on Devolutions’ continued investment in making PAM more accessible for internal IT teams, system administrators, and Managed Service Providers (MSPs). Recent enhancements strengthen access controls, simplify privileged workflows and help meet enterprise security and compliance requirements.

Key capabilities include:

  • Scoped administrator roles. The administrator roles are no longer all-or-nothing. A Workspace administrator can manage users and platform settings without seeing vault contents, applying least privilege to administrators. This is especially valuable for MSPs managing multiple client environments and organizations with strict separation-of-duties requirements.
  • Dedicated Auditor role. Security and compliance teams can review activity logs and session metadata without accessing privileged credentials, making it easier to resolve a long-standing difficulty in audit workflows.
  • One vault for connections and PAM credentials. Most administrators already connect to their assets with a PAM account. Now those privileged credentials sit in the same vault as the entries they’re used with. Starting a session and retrieving its credentials happen in one place; there’s one set of permissions to manage, and each credential stays tied to the connection that uses it.
  • Checkout request and approvals. Users can request time-limited access, with multi-factor authentication (MFA) available. Reviewers approve, deny or modify the request from the web interface, the mobile app or Remote Desktop Manager. When the checkout ends, the password is rotated automatically, and the just-in-time (JIT) permissions are removed.
  • Extendable checkouts and reusable just-in-time accounts. Work that runs past its window can continue without starting over, with approval and time limits available to keep access controlled. Reusable JIT accounts keep mailboxes, licenses, and history tied to the same identity.
  • Session recording and audit logging. Privileged sessions can be recorded and played back, and every privileged action is logged, with predefined PAM reports that give auditors a starting point.

Availability and pricing

The new features are expected to become generally available in December 2026. The upcoming features will be demonstrated at Microsoft Ignite, November 17 – 20, at Devolutions’ booth 6271R.

Devolutions PAM is available now and can be downloaded from the Devolutions download center. Existing customers can add the PAM module to their current Remote Desktop Manager, with either their cloud or self-hosted workspace.

For new customers, buying Devolutions PAM includes the workspace it runs in, backed by either a self-hosted or cloud-based workspace. A 14-day free trial is available. Pricing is based on named users: the Privileged Access Management package is $650 USD per user per year, billed annually, with standard support included.

About Devolutions

Founded in Canada in 2010, Devolutions develops secure access and IT management solutions designed to help organizations manage privileged access, passwords and remote connections while simplifying and securing IT operations. More than one million users across 140 countries use Devolutions solutions. For more information, visit devolutions.net.

Media Contact
Jenn Zimmer
The Hoffman Agency
Devolutions-US@hoffman.com
408-621-3352

SOURCE Devolutions