# Tailscale PAM

Last validated Aug 17, 2026

> **Note:** Tailscale PAM is currently in beta.

Tailscale PAM is a next-generation Privileged Access Management (PAM) solution that provides application-aware access to resources in your Tailscale network. Tailscale PAM uses [Tailscale's identity layer][docs-tailscale-identity] to provide secure access to Linux servers, databases, Kubernetes clusters, and more. It governs privileged sessions at the moment access happens, with complete session auditing and session recording, where applicable.

Explore the following topics to understand what Tailscale PAM does and how to get started with governing privileged access to resources in your tailnet.

[**What is Tailscale PAM?**](/docs/privileged-access-management/what-is-tailscale-pam) — Tailscale PAM provides privileged and auditable access to resources like Linux servers, databases, and Kubernetes clusters in your Tailscale network.

[**Tailscale PAM architecture and core concepts**](/docs/privileged-access-management/architecture-and-concepts) — Get an overview of the Tailscale PAM architecture and core concepts.

[**Get started with Tailscale PAM**](/docs/privileged-access-management/get-started) — Sign up for Tailscale PAM and use it to provide privileged access to resources in your Tailscale network.

[docs-tailscale-identity]: /docs/concepts/tailscale-identity