Skip to main content
Every connection an AI agent makes is a normal PAM session, so you review and stop an agent’s sessions the same way you review and stop a person’s.

​
Review what the agent did

To review the agent’s work, open its sessions and check the queries or commands in each recording. Sessions show whoever the run authenticated as. If that’s a machine identity, its sessions and audit log events show Machine Identity where a person’s email would appear.

​
Stop an agent

To remove an agent’s access right away:
1
Remove the role that the run’s user or machine identity has on the folder or account, so the agent can’t open new sessions.
2
Terminate the agent’s active sessions on the Sessions page.
If the account requires approval, revoking the request also ends its sessions.