What BCRG.AI offers

Privileged Access Management

PAM is the control point for privileged access to servers and network elements. A person or an automated system reaches a target through the platform, for a limited time, and the action stays tied to a named identity.

The platform is built for a telecommunications estate: mixed servers, network elements from more than one vendor, and operation inside the operator’s own data centres.

What it covers

  • Brokered sessions, so the requester does not need a standing administrative path to the target.
  • Credentials held in a vault and kept out of the requester’s view while the session is open.
  • Time-limited access, approval, and separation of duties, including the rule that an identity cannot approve its own request.
  • SSH sessions and model-driven configuration of network elements under the same authorisation record.
  • Adapters for vendors and protocols, so a new device family does not require a new core.
  • An inventory of managed targets and discovery of privileged accounts that are not yet under management.
  • Oversight of live sessions, including the ability to end one, and an audit of who reached which system and why.
  • A separate path for machine identities, with access that expires on its own.

Where it runs

Routine operation stays inside the operator’s environment. The sandbox on this site will later show the front end. It will not stand in for the deployed platform.

Energy Digital Twin

TO-DO: Add product description.