Hi, we need to profile auditors per device/user group , is this possibile ?
auditor1 can view session recording for device/usergroup1
auditor2 can view session recording for device/usergroup2
Unfortunately this is not possible as of now in PAM.
I suggest to raise an idea here in the communities to introduce access control for recordings on a device or user level.
Currently, any user being member of an access role which owns the sessionRecordingRead privilege is able to view all session recordings in this Cluster.
You would need to setup a separate PAM cluster processing the different devices or users to have separate recordings and access to these recordings.