Privileged Remote Access 25.3.1 release notes

Say goodbye to manual drudgery! Vault admins can now automatically import domain accounts, endpoints, and local accounts right after scheduled discovery runs, thanks to smart, predefined filters. With Import Rules, you can assign filters to apply during a predefined scheduled discovery. This keeps your Vault fresh and secure, while still giving you the freedom to manually import anything that falls outside the filters.

This works across all scheduled discovery job types supported by Vault.

ℹ️

For more information, see:

• Discovery | PRA Pathfinder
• Discovery | PRA Cloud
• Discovery | PRA On-prem

Goodbye limitations, hello flexibility!

ECM now returns credentials for SSH, SSH Keys, Webjump, and databases (MSSQL, PostgreSQL, and MySQL Protocol Tunnel Jump Items).

Why it matters:

• Seamless access for your database Jump Items
• Faster workflows, fewer roadblocks
• More power for your integrations

📘

This update requires a new plugin download. For more information, see Install the Endpoint Credential Manager.

Get ready for the future of macOS! With the launch of Apple’s latest version, we have you covered. Enjoy instant compatibility, expert guidance, and tips to unlock the newest features without missing a beat.

Remember that automatic update feature from Base 8.0? It’s back, but smarter and friendlier!

What’s Changing in 25.3:

• No surprise pushes. You get to choose when you update.
• You’ll get a heads-up when a new update is available.
• Download and install when it works for you. Full control, zero stress.
• Staggered releases mean no mass rollout chaos.

Simply check the auto install checkbox and select your update cadence.

This is updates done right: transparent, flexible, and customer-first.

ℹ️

For more information, see:

• Updates | PRA Pathfinder
• Updates | PRA Cloud
• Updates | PRA On-prem

More Room for Vendors!

We’ve cranked up the vendor group limit to 500.

Go big, group bigger!

ℹ️

For more information, see:

• Pathfinder - Vendors
• Cloud - Vendors
• On-Prem - Vendors

Managing Jump Client sessions just got easier, and way more intuitive. You can now prioritize Session Policies assigned to external reps/access invites, ensuring expected policy enforcement in external session/access scenarios. 

What’s New?

• The policy selected during the invitation process is the only policy applied to the invited Rep.
• Jump Item and Public Portal policies are skipped for external invitees.

ℹ️

For more information, see:

• Session policies | PRA Pathfinder
• Session policies | PRA Cloud
• Session policies | PRA On-prem

Flexibility meets control! Shells start in the context of the endpoint’s logged in user and use a button in the console to open an elevated shell tab that runs in the system/root context (only if the Jump Client is elevated).

• Match the Logged-In User for a familiar experience
• Go System/Root when Jump Client is elevated for full power

Your shell, your rules. Simple, secure, and ready to roll!

ℹ️

For more information, see:

• Session policies | PRA Pathfinder
• Session policies | PRA Cloud
• Session policies | PRA On-prem

We’re making life easier for cloud-native teams:

Create Kubernetes Jump Items that work seamlessly with Azure Kubernetes Service (AKS) endpoints.

Why you’ll love it:

• Simplifies secure access to AKS clusters
• Keeps your workflows cloud-ready and efficient
• Your Kubernetes game just leveled up!

ℹ️

For more information, see Install a Linux Jumpoint | PRA.

We’re introducing granular RBAC magic to make remote access management a breeze.

Remote Access Management Role

• Non-admins can add members to group policies

Why it matters:

Delegate /login administrative tasks to others that don’t need global admin rights to enable zero trust.

Non-admins:

• Can see the Group Policy tab​
• Cannot create a new group policy or change the order​
• Can only see and edit group policies they are in​ and
• Only membership section​

ℹ️

For more information, see:

• Users & security | PRA Pathfinder
• Users & security | PRA Cloud
• Users & security | PRA On-prem

If a Vault account doesn’t allow simultaneous checkout and you try to grab it while someone else already has, no worries! The account still displays, but is grayed out with a little lock icon. Hover over it, and you’ll see a friendly message letting you know it’s currently checked out by another user.

ℹ️

For more information, see:

• Pathfinder - Vault Options: Allow simultaneous checkout rules
• Cloud - Vault Options: Allow simultaneous checkout rules
• On-Prem - Vault options: Allow simultaneous checkout rules

We’re adding new functionality to force close windows in an elevated session:

• New Config Option in /login > Management > Security
• Force-close any windows opened during an elevated session
• Applies to Windows elevated sessions only
• Off by default. Enable when you need that extra lockdown!

ℹ️

For more information, see:

• Pathfinder - Force the closure of windows that were opened during the session
• Cloud - Force the closure of windows that were opened during the session
• On-Prem - Force the closure of windows that were opened during the session