Privileged access management (PAM) plan