We've been trying to find an PAM solution. We tried Beyond Trust Avecto but the agent caused all kinds of problems for developers. I can see how this tool might help but we need to limit giving anyone admin rights but still need to give people permissions to do some things that might normally take admin rights. It's a conundrum to be sure.
\m/