--- updatedAt: 2026-10-02T21:24:14.000Z --- # Privileged Remote Access Glossary The following is an alphabetical list of product-specific terms with their descriptions.
Term Definition
Account Groups Logical groupings of accounts used to simplify permission assignment, policy enforcement, and access management.
Account Policies Rules that govern how accounts are managed and accessed, including security requirements and usage constraints.
Application Programming Interface (API) An API is a programming interface provided for automation tools and external applications.
API Configuration Settings that enable and control access to the Remote Support API for integrations and automation.
Appliance The BeyondTrust platform component (physical or virtual) that hosts and runs Remote Support services.
Appliance Administration Administrative controls used to manage appliance-level settings, maintenance tasks, and operational status.
Asset (formerly known as Jump Item) Individual systems or devices that are made available for remote access within an Asset Group, enabling administrators to organize and control access to remote systems in a secure manner.
Asset Group (formerly known as Jump Group) A collection of Assets. Asset Groups can be used to organize Assets in any manner that works for your organization. For example, servers could be organized in geographic, departmental, or team Asset Groups. Asset Groups can also be used to manage access. For example, one set of Jump Clients could be accessible by the help desk team, while another set is accessible by the network team.
Asset Policy (formerly known as Jump Policy) Used to control access to Assets. For example, access might be restricted to specific hours. Asset Policies can be applied to individual Assets or Asset Groups.
Asset Reports Reports detailing usage, configuration, and activity related to Assets.
Asset Role (formerly known as Jump Item Role) a predefined set of permissions regarding Asset management and usage. You assign users to an Asset or an Asset Group either through Group Policies or by adding individual users. You can set an individual user's permissions to specific Assets in a group, or the entire group.
Atlas in the Cloud Atlas in the Cloud is a cloud-based extension of BeyondTrust's Atlas technology designed for large enterprises needing more concurrent sessions than a single B Series Appliance can support. It distributes load across multiple appliances in different geographic locations.
B Series Appliance A BeyondTrust hardware or virtual appliance that acts as the central communication point for secure remote access, handling session brokering, authentication, logging, auditing, and encryption for Privileged Remote Access deployments.
B Series Appliance On-Premises Security The security model for B Series Appliances deployed in customer-controlled environments, including secure protocols, directory integration, session recording, auditing, and local data control.
Base (Component of B Series Appliance) Firmware providing system-level configuration (IP addresses, certificates). Managed through the /appliance web interface.
BeyondTrust Cloud Region Availability A listing of the geographic cloud regions where BeyondTrust cloud services can be deployed to meet data residency, compliance, and latency requirements.
Term Definition
Canned Scripts Predefined scripts that can be executed during remote sessions to automate common or repetitive tasks.
Cloud Network Infrastructure Cloud Network Infrastructure explains how BeyondTrust Secure Remote Access (SRA) operates within the SRA Cloud instance to ensure secure and efficient communication between application components. The cloud acts as the central routing point where all user and remote sessions occur through B Series Appliance server components.
Compliance Reports Reports that provide audit-ready data to help demonstrate adherence to regulatory and security requirements.
Connect to Connect to, Push and Start, and Pushed Sessions refer to BeyondTrust sessions started from either Gateways or Local Jumps, without distinction. Thus, a pushed session can refer to either of these technologies but not to Jump Client sessions or pinned sessions. Similarly, Push and Start and connect to can refer to either connecting through a Gateway or a Local Jump but not to connecting to a Jump Client.
Configuration Settings used to customize how Privileged Remote Access operates, including system behavior and feature enablement.
Console Settings Configuration options that control the behavior and appearance of the Privileged Remote Access access console.
Consoles & Downloads A centralized area where users obtain access consoles, clients, and related software downloads.
Credential Injection A built-in SRA feature for injecting credentials into systems without exposing passwords, compatible with third party vaults.
Custom Fields User-defined metadata fields that extend standard objects for tracking additional information.
Custom Links Administrator-defined links added to the console to provide quick access to external or internal resources.
Discovery Processes used to identify systems, services, or credentials that can be managed by Privileged Remote Access.
Drivers Software components required to support specific remote access or device communication functions.
Duplicate Jump Clients Report A report that identifies multiple Jump Clients installed on the same endpoint.
Term Definition
Endpoint Any remote computer or device residing on a network. This can include: Windows desktops, laptops, and servers; MacOS and iOS devices; Linux systems; Android phones and tablets; Search- and Telnet-enabled devices such as Cisco switches or BeyondTrust B Series Appliances.
Endpoint Automation Automation capabilities that allow predefined actions or scripts to run against managed endpoints.
Endpoint Credential Manager (ECM) An ECM functions as the middleware for communication, and the ECM can be used to integrate SRA with password vaults.
Entitle Entitle is a solution that enables temporary provisioning of access to implement JIT access, reducing exposure from inactive but privileged accounts.
Gateway (formerly known as Jumpoint) A secure connection point used in Remote Support to facilitate access to remote systems without requiring direct public internet exposure, enabling secure, controlled remote sessions. A Gateway allows administrators to securely manage remote connections through internal networks or firewalls, ensuring protected access to remote systems while maintaining network security. Users can access computers on a remote network without having to pre-install software on every machine. Install a single Gateway agent at any network location to gain unattended access to every PC within that network. Deploy a Gateway if you need: To troubleshoot all systems in a network without pre-deploying BeyondTrust clients on each system prior to connecting; Access to SSH, Telnet, or vPro systems on that network, like servers, routers, POS systems, or ATMs; To run Microsoft Remote Desktop Protocol sessions while maintaining a consistent audit trail.
Group Policies Policies applied to groups to control access rights, session behavior, and security enforcement.
Hosting Locations and Disaster Recovery Documentation describing where BeyondTrust cloud services are hosted and how redundancy, backups, and disaster recovery are implemented.
Term Definition
Insights A solution that increases visibility into identities holding potentially risky permissions. It continuously detects and evaluates these identities to provide clearer context on who has access to what, and why.
Installed Patches A listing of patches currently applied to the Remote Support system.
Jump Enables secure, unattended access to remote systems.
Jump Client used to establish a one-to-one encrypted connection between a B Series Appliance and a remote Windows, Mac, Android, or Linux system. A Jump Client must be installed on each remote system you want to access. The installed Jump Clients to which a representative has permission are listed in the bottom pane of the representative console. Jump Clients are state-aware, which means they can determine if a user is present and interact accordingly. They can also be set to automatically uninstall, to meet compliance requirements. Deploy a Jump Client if you need: Attended or unattended access to computers and other devices, regardless of network location; Stronger management capacities and the control of installing a persistent and secure remote access client.
Lightweight Directory Access Protocol (LDAP) LDAP is an external user directory that SRA can connect to for secure user management.
Local Jump (or Local Push) Connecting from the representative console using the local network. This allows a representative to initiate a BeyondTrust session with Windows systems on the same network segment as the representative console, without using a Gateway. The requirements on the endpoint being assessed and the functionality for Local Jumps are the same as for Remote Jumps with Gateways.
Log Session ID (LSID) A 32 character GUID that uniquely identifies each SRA session log.
Term Definition
Modern Privileged Access Management (Modern PAM) BeyondTrust's approach to PAM that combines identity risk insights, automated least-privilege access, and secure remote access across hybrid and cloud environments.
My Account User-specific settings related to profile information and personal preferences.
Options General configuration settings that affect system behavior and feature availability.
Outbound Events Events generated by the system and sent to external systems for monitoring or integration.
Privileged Access Management (PAM) PAM is the larger set of solutions under which PRA operates. While the document does not provide a full definition, it identifies PAM as the overarching suite that includes PRA.
Primary Node A Primary Node is the main configuration point for an SRA site. It hosts the /login administrative interface, initiates sessions, and automatically pushes configuration settings to traffic nodes.
Push and Start Connect to, Push and Start, and Pushed Sessions refer to BeyondTrust sessions started from either Gateways or Local Jumps, without distinction. Thus, a pushed session can refer to either of these technologies but not to Jump Client sessions or pinned sessions. Similarly, Push and Start and connect to can refer to either connecting through a Gateway or a Local Jump but not to connecting to a Jump Client.
Pushed Sessions Connect to, Push and Start, and Pushed Sessions refer to BeyondTrust sessions started from either Gateways or Local Jumps, without distinction. Thus, a pushed session can refer to either of these technologies but not to Jump Client sessions or pinned sessions. Similarly, Push and Start and connect to can refer to either connecting through a Gateway or a Local Jump but not to connecting to a Jump Client.
Term Definition
Reports A collection of reporting tools that provide visibility into system activity and usage.
Representative Invite A mechanism used to invite users or external parties to access Remote Support with defined permissions and security controls.
Secret Store A secure storage location for sensitive credentials and secrets managed by PRA.
Security Controls and settings that protect access, sessions, and system integrity.
Security Providers External services integrated to support authentication, authorization, or identity management.
Services Managed services or service accounts available within Privileged Remote Access.
Session Policies Rules that govern how remote sessions are conducted, including permissions and restrictions.
Site Configuration Settings that define site-wide behavior and operational parameters.
SSH Certificate Authority in Vault Accounts A capability that allows Vault to act as a certificate authority for SSH authentication.
Status System health and operational indicators for Privileged Remote Access components.
Syslog Reports Reports that capture and present system events forwarded via syslog.
Teams Collections of users organized to simplify access control and responsibility assignment.
TLS Configuration Settings that control Transport Layer Security behavior for encrypted communications.
Secure Remote Access (SRA) SRA is a secure access solution that lets organizations control access to critical systems without hindering privileged users. Allows defining how users connect, monitoring sessions in real time, and recording every session for detailed auditing.
Traffic Node A node in a clustered SRA environment that handles session traffic. It cannot be added/edited/removed by the customer; it uses (customerID)-region.beyondtrustcloud.com for routing.
Term Definition
Updates Processes used to apply software updates and enhancements to the system.
Users Individuals or accounts authorized to access Privileged Remote Access.
User Management Administrative functions for creating, modifying, and controlling user accounts.
User Permissions Access rights assigned to users that determine what actions they can perform.
Vault A secure credential management component used to store and control access to secrets.
Vault Reports Reports focused on credential usage, access history, and Vault activity.
Vendors External users or third parties granted controlled access through Privileged Remote Access.
Vendor Reports Reports that track activity and access associated with vendor accounts.
Video Session Recording Captures the visible endpoint screen for the duration of the session, including metadata on input control.
Vulnerability Scanning Part of BeyondTrust's testing process to identify security vulnerabilities before release. Critical findings trigger maintenance releases; third party code review & penetration testing validate controls.
Zero standing Access Zero standing Access is a security approach where permissions are automatically removed from accounts when not actively used, following just in time (JIT) access principles.