Try our new research platform with insights from 80,000+ expert users

CyberArk Privileged Access Manager vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
CyberArk Privileged Access Manager boosts security, efficiency, and compliance while reducing risks and costs, ensuring significant operational improvements.
Sentiment score
7.0
One Identity Active Roles enhances efficiency, reduces manual tasks, improves satisfaction, and saves costs, offering quick ROI for organizations.
The return on investment lies in improved security infrastructure, addressing over-privileged access, and reducing the risk of credential compromise, which is a major source of data breaches.
During our quantitative analysis, we estimated potential savings of one to ten million dollars a year by using a PAM solution.
With other tools such as Okta where you have self-service for resetting your own passwords and things like that, the average savings is 12 minutes, which is six dollars for a password reset, and you can extrapolate that over your organization.
 

Customer Service

Sentiment score
6.4
CyberArk's support is knowledgeable but inconsistent in response times, needing improvement in communication and documentation for non-critical issues.
Sentiment score
9.0
One Identity Active Roles customer support is praised for responsiveness, expertise, and a proactive approach in addressing unique challenges.
CyberArk has been exceptional in coming back to us with immediate responses.
It could be forever until you talk to someone who knows what they are doing.
They are helpful, but complex issues can take a long time to resolve, which can delay solutions for urgent customer issues.
One Identity's support is great.
 

Scalability Issues

Sentiment score
7.7
CyberArk Privileged Access Manager is praised for scalability but requires careful planning for managing credentials and configurations effectively.
Sentiment score
7.5
One Identity Active Roles excels in scalability, effective Active Directory management, and offers flexibility, automation, and role management.
The CPM can reportedly handle up to 50,000 accounts independently without issue.
I would rate it a ten out of ten for scalability.
They had 40,000 passwords in this one safe, and it was saving the last ten iterations of each password object. That means they had 400,000 password objects in this safe. They exceeded the limit.
It is very beneficial for large and complex environments.
 

Stability Issues

Sentiment score
7.8
CyberArk Privileged Access Manager is stable and resilient, with issues often due to configuration errors and quickly resolved by support.
Sentiment score
7.6
Users praise One Identity Active Roles for its stable performance and reliability, with minimal maintenance and occasional web lag.
Proper fine-tuning and expertise ensure the product performs well.
Overall, the stability of the solution is high.
It has a large customer base and positive feedback within my network.
 

Room For Improvement

CyberArk Privileged Access Manager needs UI, performance, and integration improvements, focusing on intuitiveness, customization, and cost efficiency.
One Identity Active Roles needs customization improvements, better Azure AD integration, modernization, SaaS options, and resolution of pricing and usability issues.
They want everything to be on the cloud, but even in the SaaS version of CyberArk Privileged Access Manager, they need to deploy some servers on-premises.
We cannot generate a plug-in for web-based applications.
If they want clients to move to the cloud, they need to support them in real-time.
A way to connect to various directories and integrate with cloud directories would be beneficial.
 

Setup Cost

CyberArk Privileged Access Manager is costly but valuable for large enterprises, with flexible pricing based on needs and licensing.
One Identity Active Roles provides robust features and ROI, justifying its higher licensing cost for enterprise buyers.
CyberArk is expensive compared to other products I know.
CyberArk is comparatively expensive compared to other PAM solutions, such as Delinea, especially during renewal.
CyberArk's SaaS solution is particularly expensive.
The pricing is high.
 

Valuable Features

CyberArk Privileged Access Manager automates password management, monitors sessions, and integrates platforms to enhance security and compliance.
One Identity Active Roles enhances Active Directory management with role-based access, flexible workflows, customization, and comprehensive security features.
CyberArk Privileged Access Manager helps ensure data privacy because we now know who is using which credentials and at what time.
It keeps a record of activities, allowing me to easily fetch screen recordings to detect any misuse and see who did what and what happened.
It can integrate with Splunk, SNMP, and other solutions and technologies.
It is very intuitive and close to the native tools.
 

Categories and Ranking

CyberArk Privileged Access ...
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
214
Ranking in other categories
User Activity Monitoring (1st), Enterprise Password Managers (2nd), Privileged Access Management (PAM) (1st), Mainframe Security (2nd), Operational Technology (OT) Security (3rd)
One Identity Active Roles
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
20
Ranking in other categories
User Provisioning Software (5th), Active Directory Management (5th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CyberArk Privileged Access Manager is designed for Privileged Access Management (PAM) and holds a mindshare of 19.4%, down 23.3% compared to last year.
One Identity Active Roles, on the other hand, focuses on User Provisioning Software, holds 4.4% mindshare, down 4.5% since last year.
Privileged Access Management (PAM)
User Provisioning Software
 

Featured Reviews

Lasantha Wijesinghe - PeerSpot reviewer
We have visibility and control through real-time user behavior analytics
It took us some time to realize its benefits because there was a learning curve for us. It took us about a year to get our heads around this product and start effectively using it. It is a journey. It takes at least five years for any company to make this product very useful and reach maturity. It is not only the product's fault. The company needs to have a vision, and the company culture needs to go with it. Senior leadership needs to support the vision. You need to have lots of ingredients for success. If everything is in place, you will see success after one year. In the first year, it is a struggle for everybody. My company was bought by a bigger company, and they were very new to privileged access management. Everybody was struggling. The advice I would give is to have a good vision for privileged access management. You need dedicated teams, senior management support, and proper company policies and standards before implementing the solution. Start building knowledge slowly and avoid jumping into the deep end without preparation. I would rate CyberArk Privileged Access Manager a nine out of ten.
Neera Jain - PeerSpot reviewer
Requires minimal training and provides granular control
The granular control has been very helpful for us. We want to be able to control what level users have access to. It is possible to control access levels at the organizational unit or even the attribute level, making it helpful for us. Active Roles helped increase operational efficiency in our organization. We have delegated user provisioning to the help desk so they can create users or manage accounts. We have delegated group management to identified group owners who can manage their groups. Some of them just need read-only access to AD; they do not need to download the native tools. They can just do it via a browser. Active Roles has helped our organization reduce the number of erroneous privileged accounts. We have set the templates, and we have set the standards. It helps standardize all the naming conventions and how they are provisioned with the rules. That is definitely very helpful. We use the change history to see who might have modified what object. We have that tracking, but we use a tool from Quest called Change Auditor that can do the auditing to figure out who did what type of thing for auditing.
report
Use our free recommendation engine to learn which Privileged Access Management (PAM) solutions are best for your needs.
841,302 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
34%
Financial Services Firm
12%
Computer Software Company
11%
Manufacturing Company
5%
Computer Software Company
17%
Financial Services Firm
12%
Government
8%
Healthcare Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What do you like most about CyberArk Privileged Access Manager?
The most valuable features of the solution are control and analytics.
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
I focus more on the technical side, but I hear customers say that if CyberArk was more affordable, they might have acquired more licenses. Some clients consider alternative solutions due to pricing...
What is your experience regarding pricing and costs for One Identity Active Roles?
The pricing is high. I have not been involved with the renewal or cost aspect, but I know it is not cheap by any means. However, it is very useful for our environment.
What needs improvement with One Identity Active Roles?
I know they have increased support for Entra ID and mentioned providing support for AWS. A way to connect to various directories and integrate with cloud directories would be beneficial.
 

Also Known As

CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
Quest Active Roles
 

Overview

 

Sample Customers

Rockwell Automation
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about CyberArk Privileged Access Manager vs. One Identity Active Roles and other solutions. Updated: March 2023.
841,302 professionals have used our research since 2012.