Privileged Access Gateway (PAG) is a managed service used to provide a secure way for operators to remotely administer servers and clusters within the IBM Cloud. It does this by providing a Bastion gateway server, which is a single point of entry to a set of customer servers and clusters. In addition to this restricted gateway access, PAG records operator sessions, and these recordings can be used for investigations of system misuse.