Skip to main content
Empuls and Xoxoday’s operations use a structured PAM approach so that privileged access is tightly controlled, short-lived, and fully auditable.
Empuls and Xoxoday’s operations use a structured PAM approach so that privileged access is tightly controlled, short-lived, and fully auditable.

​
Principles & scope

  • PAM is built on least privilege, need-to-know, and separation of duties for all critical systems (infrastructure, databases, production consoles, Empuls Super Admin roles).

​
Provisioning of privileged accounts

  • Any privileged access (e.g., production admin, DB admin, Empuls Super Admin) must come via a formal request/ticket, with documented business justification and approvals from authorized personnel.
  • Access is granted only by designated system administrators and always mapped to predefined privileged roles; ad-hoc access outside the role matrix is explicitly documented and restricted to the minimum required scope and duration.

​
De-provisioning & lifecycle management

  • Employment termination or role change automatically triggers revocation or downgrade of access rights; administrators are required to remove or adjust privileged access so users don’t retain more rights than their current roles and responsibilities requires.
  • Xoxoday performs periodic reconciliation of accounts and privileges (at least annually); any irregular or unused privileged accounts identified during this review are disabled or corrected immediately.

​
Monitoring of privileged sessions

  • All production and admin access is logged to centralized logging systems to maintain user accountability; security-relevant events (logins, failed attempts, configuration changes, role changes) are captured and reviewed.
  • Infrastructure and application monitoring stacks (e.g., Prometheus + Grafana) generate near real-time alerts on abnormal behaviour or failures, giving the security and other teams visibility into privileged activities on Empuls environments.
For an on-prem Empuls deployment at your organisation, these same PAM controls can be aligned with your organisation’s own AD/IdP and ticketing processes so that privileged Empuls roles are granted, reviewed, and revoked under your organisation’s central governance. Learn more: Empuls Help Centre

How Often Are Privileged User Access Rights Reviewed?

Xoxoday Empuls reviews privileged user access rights at least quarterly and on every role change, transfer, or termination, per its ISO 27001 policy.

Does Empuls log and review security events in real time?

Empuls logs all security-relevant events—login attempts, privileged activity, and config changes—near real time, scaled to each resource’s risk level.