IGA governs access across the enterprise, while privileged access management (PAM) applies specialized controls to privileged access.
IGA determines eligibility, routes approvals, provisions access, runs certifications and removes access after lifecycle changes. PAM protects powerful administrator and service access through credential vaulting, rotation, elevation, session brokering and recording. Integrated programs use IGA to decide who may receive or retain privileged access and PAM to control how that privilege is issued and used.