Skip to content

    Privileged Access Governance (PAG)

    What is Privileged Access Governance?

    Privileged access governance ensures that, after access has been granted, users and privileged accounts only retain least privileged access commensurate with their current needs.

    Some processes commonly associated with PAG are:

    • automated account provisioning
    • automated deprovisioning when roles, systems, and needs change
    • approval processes to ensure those people and systems requesting access should rightfully be granted it
    • a review and attestation/recertification process to ensure roles and permissions remain current

    Other PAG Resources:


    Privileged Access Governance | KuppingerCole Report