Privileged access management
PAM the program: vault the admin passwords, broker the sessions, record them. Not the same as Linux PAM, the Unix login modules. People say both.
Privileged access management is the security program for powerful accounts: check-out of passwords, just-in-time admin, session broker, recording, and no standing domain admin on a sticky note. Privileged user is the person; this is the control plane around them.
Confusingly, PAM is also Pluggable Authentication Modules on Unix: the stack that decides how a login is authenticated on that host. Same letters. If someone says configure PAM, ask which one. The program does not replace least privilege; it enforces it for the accounts that can wreck you.
See also: Privileged user, Least privilege, Identity and access management, Bastion host, Multi-factor authentication.