Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Customer Service

Sentiment score
6.8
CyberArk Privileged Access Manager's support is efficient and knowledgeable, but response times and communication can vary, especially with outsourcing.
No sentiment score available
 

Room For Improvement

Sentiment score
6.7
Enhancements sought include user-friendliness, integration, automation, reporting, customization, API support, cost efficiency, deployment, documentation, and updates.
No sentiment score available
 

Scalability Issues

Sentiment score
7.1
CyberArk Privileged Access Manager offers seamless and flexible scalability for organizations, though licensing challenges may occur.
No sentiment score available
 

Setup Cost

Sentiment score
5.0
CyberArk Privileged Access Manager is costly but offers high value and comprehensive security, with subscription models benefiting larger installations.
No sentiment score available
 

Stability Issues

Sentiment score
7.8
CyberArk Privileged Access Manager is stable, with occasional bugs, but upgrades and redundancy features improve reliability and performance.
No sentiment score available
 

Valuable Features

Sentiment score
8.5
CyberArk Privileged Access Manager enhances security with automatic password rotation, session monitoring, and supports large-scale, compliant deployments.
No sentiment score available
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
193
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (3rd), Operational Technology (OT) Security (3rd)
One Identity Active Roles
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
19
Ranking in other categories
User Provisioning Software (5th), Active Directory Management (5th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 21.2%, down 24.0% compared to last year.
One Identity Active Roles, on the other hand, focuses on User Provisioning Software, holds 6.3% mindshare, up 6.0% since last year.
Privileged Access Management (PAM)
User Provisioning Software
 

Featured Reviews

SatishIyer - PeerSpot reviewer
Lets you ensure relevant, compliant access in good time and with an audit trail, yet lacks clarity on MITRE ATT&CK
When I was a component owner for PAM's Privileged Threat Analytics (PTA) component, what I wanted was a clear mapping to the MITRE ATT&CK framework, a framework which has a comprehensive list of use cases. We reached out to the vendor and asked them how much coverage they have of the uses cases found on MITRE, which would have given us a better view of things while I was the product owner. Unfortunately they did not have the capability of mapping onto MITRE's framework at that time. PTA is essentially the monitoring interface of the broker (e.g. Privileged Access Management, the Vault, CPM, PSM, etc.), and it's where you can capture your broker bypass and perform related actions. For this reason, we thought that this kind of mapping would be required, but CyberArk informed us that they did not have the capability we had in mind with regard to MITRE ATT&CK. I am not sure what the situation is now, but it would definitely help to have that kind of alignment with one of the more well-known frameworks like MITRE. For CyberArk as a vendor, it would also help them to clearly spell out in which areas they have full functionality and in which ares they have partial or none. Of course, it also greatly benefits the customers when they're evaluating the product.
JosephChandrasekaram - PeerSpot reviewer
Single interface and workflows simplify AD and Azure AD management efficiency and security
The most valuable features include * auditing * dynamic grouping * creating dynamic groups based on AD attributes. Also, as part of the cloud identity, meaning expanding identity to the cloud, it gives me a single workflow to expand on-prem. I can create a user in the cloud and give them access to resources through a single workflow. And for regulatory, auditing, and security requirements, it's critical that the solution enables Zero Trust security with hybrid AD fine delegation and role-based access control.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
816,406 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
31%
Financial Services Firm
13%
Computer Software Company
11%
Manufacturing Company
6%
Computer Software Company
16%
Financial Services Firm
12%
Healthcare Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
CyberArk Privileged Access Manager comes at a high cost. But the solution is worth its price.
What is your experience regarding pricing and costs for One Identity Active Roles?
The pricing for Active Roles is expensive but not as expensive as other solutions like Okta.
What needs improvement with One Identity Active Roles?
Active Roles can fix many little problems that have never been resolved and have lingered for years, continuing to annoy people. For example, you can't search by object GUIDs. The manual says you c...
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Quest Active Roles
 

Overview

 

Sample Customers

Rockwell Automation
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about CyberArk Privileged Access Manager vs. One Identity Active Roles and other solutions. Updated: March 2023.
816,406 professionals have used our research since 2012.