Privileged Remote Access 25.2 release notes

You can use the Discovery feature to easily find AWS Secrets stored in AWS Secrets Manager, making it simpler to bring everything together in one secure place.

ℹ️

For information, see Discovery of AWS Secrets.

In Password Safe:

Vault discovers and imports Managed Accounts and Managed Systems from your Password Safe instance.

ℹ️

For information, see Discovery of Password Safe.

Endpoint automation makes it easy to run scripts on multiple devices at once—no need to start a support session. It’s a great way to speed up routine tasks and boost efficiency.

With automation, manage all your systems more smoothly, cut down on manual work, and ensure everything stays updated and consistent across the board.

ℹ️

The endpoint automation feature is only available to service mode Jump Clients with an active connection on Mac, Windows, or Desktop Linux.

ℹ️

For more information, see Endpoint automation API support.

Assign users the right level of access to endpoint automation based on what they need to do.

• Not Allowed: The Endpoint Automation tab is hidden.
• User: Create automation jobs but with some limits.
• Administrator: Full access to create jobs, script templates, and resources.

Access automation roles under Access Permissions when you add a new user or edit an existing user on the Users & Security > Users page.

ℹ️

For more information, see Roles for Endpoint Automation.

You’ll find a new report under Reports > Duplicate Jump Clients that shows how many duplicate Jump Clients are in your environment—making it easier to keep things organized.

ℹ️

For information, see Duplicate Jump Clients reports.

You can now take advantage of these Wayland features:

• Mouse and keyboard functionality
• Screen sharing in view-only mode

You still need X Server for Wayland to run properly. A fully standalone Wayland setup isn't supported at this time.

ℹ️

For more information, see Wayland support.

You can now mark a set of Jump Items to automatically start sessions immediately after you log in to the Console.

ℹ️

For more information, see Sessions to automatically start.

When you set up a Jump Item Role and check the Create new Jump Items or upgrade Jump Clients box, all "edit" permissions under the Jump Items section are turned on automatically. You'll see this message letting you know:

The "Create Jump Items" permission grants broad creation privileges, including the ability to set all fields on items during creation. This permission should be granted to trusted users only.

ℹ️

For more information, see Add a Jump Item Role.

You can now view the following details on the Status page:

• Number of Jump Clients in use

ℹ️

For more information, see Status.

We've made some updates to make it easier to manage duplicate Jump Clients:

• You’ll now see a warning dialog box when duplicates are detected, so you can take action right away.
• The Jump Group field is no longer automatically filled with the default group—giving you more flexibility to choose the right one for each client.

ℹ️

For more information, see Maintenance of duplicate Jump Clients.

Jump Zone Proxies can now be set up to connect to other Jump Zone Proxies. This lets you reach endpoints in target networks through multiple layers, using connected Jumpoints to bridge the gaps.

ℹ️

For more information, see Configure multiple outbound Jumpoint proxies.

OpenID Connect (OIDC) is now supported as an identity authentication protocol. From the Users & Security > Security Provider page, you can select OpenID Connect to configure a new service provider.

ℹ️

For more information, see OpenID Connect.

Added the Credential column to easily see the name of the active credential being used in a session.

The Credential field is included in audits to help track which credentials are used and to create a clear audit trail.

Available on the Web Access Console and Desktop Access Console.

ℹ️

For more information, see Credential column in console.

You can select a preset configuration based on the Access Console platform which automatically fills in the tunnel type, command, and argument fields.

ℹ️

For information, see Preset Configuration settings.

Added installer parameters for Linux and headless deployments: scope, user, headless, and online-install.

The silent parameter for Linux has been removed.

ℹ️

For more information, see Install a Linux Jump Client.

When a Jump Group is created or a user is added to a Jump Group or Jumpoint, the Access Console automatically refreshes to show the updated access state.

ℹ️

For information, see Jump interface.

The following new fields have been added to the Jump Client installer table by default:

• Jump Group
• Tag
• Comments

The Connection Type field is completely removed from the table.

ℹ️

For more information, see Jump Client installer list.

When you set up a Jump Item Role and check the Create new Jump Items or upgrade Jump Clients box, all "edit" permissions under the Jump Items section are turned on automatically. You'll see this message letting you know:

The "Create Jump Items" permission grants broad creation privileges, including the ability to set all fields on items during creation. This permission should be granted to trusted users only.

ℹ️

For more information, see Jump Item Roles.

In the Permissions section on the Users & Security > Session Policies page, a new permission called Allow original session owner to leave sessions running for others has been added. When you enable this permission, the session remains running for other participants after the original owner leaves.

ℹ️

For more information, see Allow original session owner to leave sessions running for others.

• The View Reports permission in Jump Item Roles now applies to both Jump Item reports and session reports.
• Renamed the Jump Item Role permission to View Session and Jump Item Reports. This permission is assigned through the Jump Group the user belongs to.

• Added a new permission, Allowed to View Access Session Reports, available on the Users & Security > Group Policies page under General Permissions. This option appears when the Session and Team Report Access checkbox is selected.

ℹ️

For more information, see Add a Jump Item Role.

• Increased permission granularity for session policies.

• Added new settings for Jump Policies and external tools.

• If you navigate to Jump > Jump Item > Jump Item Settings page, External Tools is now configurable as a part of Jump Policy settings instead of as a global setting. This change enables fine-grained control at both the endpoint and user levels.

  

ℹ️

For more information, see External tools.

The following new settings have been added to outbound events:

• Jumpoint is online
• Jumpoint is offline

ℹ️

For more information, see Add or edit HTTP recipient.

🛑

This feature is not available for Privileged Remote Access on-premises.

You can now use settings from a BeyondTrust hosted email gateway, there is no need to manually enter SMTP Relay Server details.

Go to Management > Email Configuration, and select Use BeyondTrust Privileged Remote Access default email gateway.

ℹ️

For more information, see Use hosted email settings.

Updated styling with a more modern color palette to improve accessibility through better font contrast and color choices.