Session Recording

The Session Recording and Playback feature in miniOrange PAM allows administrators to monitor, review, and audit privileged user sessions with full visibility.

This includes command-level tracking, live streaming, and video playback with precise timestamps for investigation and compliance purposes.

Enable Session Recording and Live Streaming

To start capturing user activity, follow these steps:

Log in to the miniOrange PAM Admin Dashboard.
Go to Settings >> Product Settings >> Dashboard.
Turn on the following toggles:

Session Recording: Enable User Session Recording
Live Streaming: Enable User Live Stream

Note:

The Real time and Recorded Sessions for resources can be managed from the Policy section.

Privileged Access Management Admin Handbook: Navigate to Settings -> Product Settings -> Dashboard

Once these are enabled, PAM will begin recording all privileged user sessions for auditing and playback.

Access the Audit Dashboard

From the top navigation bar, click on Switch Audit Dashboard to move from the Admin to the Audit environment.
In the left-hand menu, go to Sessions >> Recorded Sessions.

Privileged Access Management Admin Handbook: Navigate Sessions then Recorded Sessions

This opens a dedicated interface for viewing all recorded sessions.

Recorded Sessions Interface

The Recorded Sessions dashboard displays a detailed list of all session recordings with key attributes such as:

Privileged Access Management Admin Handbook: Click on Play button

Field	Description
User Email	Email ID of the user whose session was recorded.
Session Type	The type of session (e.g., RDP, SSH, Database).
Resource ID	Unique identifier of the accessed resource.
Resource Type	Specifies the type of resource (server, application, etc.).
Storage Location	Indicates whether the recording is stored locally or in external storage (e.g., AWS, GCP).
Start Time	Timestamp of when the session began.
User IP	IP address from which the user accessed the session.
Action (Play)	A play button to view the recorded session.

Playing a Recorded Session

When you click the Play button, the Session Playback Player opens.

Privileged Access Management Admin Handbook: Dashboard Player view

Field	Description
Executed Commands Display	Displays all executed commands with timestamps on the right side of the player. Clicking a command jumps to the corresponding point in the video.
Command Search	A search bar allows you to find specific commands executed during the session.
Restart Video	Restarts the session playback from the beginning.
Next/Previous Command	Skips to the next or previous command within the video timeline.
Full Screen View	Expands the player to full screen for better visibility.
Playback Speed	Adjusts the playback speed for faster or slower viewing.
Skip/Play Inactive Parts	Allows skipping or playing idle moments in the recorded session.
Play/Pause Video	Starts or pauses the video playback as needed.

When you terminate a live session, the system automatically saves a recording of that session. You can then navigate to the Recorded Sessions section to locate the specific session log. From there, you can view the entire recorded session to review all activities that occurred before termination.

Privileged Access Management Admin Handbook: Recorded Session Review

The Session Recording and Playback feature in miniOrange PAM ensures complete visibility, compliance, and accountability for privileged user actions. With its detailed command logs and rich playback controls, administrators can efficiently audit and investigate any user sessions.

Contents