Enterprise vault for administrator passwords and secrets, access checkout per policy, secure SSH/RDP proxy, and privileged session recording. A separate edition for perimeters where admin access control is critical (analogous to Password Manager Pro).
Eliminate "shared admin passwords" and unaccounted server access. All privileged user actions are transparent for audit.
Banks, public sector, critical infrastructure operators with privileged access policies.
Separate ERA PAM license — standalone edition, not included in the base XDR bundle.