No more typing reviews! Try our Samantha, our new voice AI agent.

IBM Resource Access Control Facility vs Idira Privileged Access Manager comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM Resource Access Control...
Ranking in Mainframe Security
6th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Idira Privileged Access Man...
Ranking in Mainframe Security
2nd
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
231
Ranking in other categories
User Activity Monitoring (2nd), Enterprise Password Managers (3rd), Privileged Access Management (PAM) (1st), Operational Technology (OT) Security (4th)
 

Mindshare comparison

As of November 2026, in the Mainframe Security category, the mindshare of IBM Resource Access Control Facility is 10.5%, down from 14.9% compared to the previous year. The mindshare of Idira Privileged Access Manager is 5.8%, up from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Mainframe Security Mindshare Distribution
ProductMindshare (%)
Idira Privileged Access Manager5.8%
IBM Resource Access Control Facility10.5%
Other83.7%
Mainframe Security
 

Featured Reviews

KC
Senior systems engineer at Unum
We're able to do role-based security so when new people join the company we're able to quickly add them to the proper security through role-based security groups.
It's completely secure. That's the best answer I can give you. We're able to do role-based security so when new people join the company we're able to quickly add them to the proper security through role-based security groups. Our resources are secured with this product I would welcome something…
Mahmudul Hoque Khan - PeerSpot reviewer
Lead Engineer at intelQong Technology
Centralized access has improved privileged control and visibility yet still needs better integrations
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creating access policies and quickly identifying unusual activities would make day-to-day administration more efficient. Stronger integration with existing identity data and secret management could be a significant improvement for Idira Privileged Access Manager. Deeper integration with cloud solutions would make it easier to correlate privileged access activity with other security events. I would also appreciate more flexible reporting and dashboards so administrators can swiftly see access patterns and unusual privileged access from a single view.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's completely secure."
"Technical support is exceptional."
"Perfectly integrated with the z/OS operating system and all the other products in the IBM z/OS family."
"I love how easily we could operate within Password Vault and get things done. It was almost effortless."
"I would rate this solution a nine out of ten."
"This is a stable, reasonably priced product, and it has good security features as well."
"CPM helps keep the password policy up to date."
"The features that are most effective, like every PAM solution, include monitoring and password rotations."
"DNA tool is amazing, far better than imaginable in previous years."
"We know when passwords will be expiring so we can force users to change their passwords, as well as requiring specific password requirements for length, complexity, etc."
"The access control feature and privilege and role-based assignment are outstanding."
 

Cons

"The way to pull security logs could be better."
"I would like the generation of RACF on-screen listings and reports to be more flexible."
"I would welcome something that is more easily integrated with distributor platforms."
"I think they can improve account onboarding. For instance, you have to use the Password Vault utility, whereas in Thycotic I think there is a feature in the user interface that allows you to upload your account with an Excel file. So I'd like to have a similar thing in CyberArk."
"CyberArk Enterprise Password Vault must incorporate connectors for password and session managers in the marketplace."
"The scalability, sometimes, is lacking. It works really well for more static environments... But for an environment where you're constantly spinning up new infrastructure or new endpoints, sometimes it has a hard time keeping up."
"I believe account discovery and rolling support need to be improved."
"To get it to a ten it should give other possibilities to select if you could follow the keystrokes. It should have a flexibility with things where people can use it a lot faster."
"We have had some performance and stability issues. We have had instances where things weren't as they should be, however, we worked closely with the development support teams once the issues were escalated and managed to find either a resolution or a workaround to stabilize the solution."
"I would prefer that this is a fully-managed service, rather than have to manage the software ourselves and keep it up to date."
"Technical support from the vendor is the worst and that is one reason I stopped using CyberArk."
 

Pricing and Cost Advice

Information not available
"The pricing is slightly higher compared to other solutions, but it is reasonable because there are better security features."
"CyberArk DNA is free if you purchase the CyberArk solution. There is no additional charge for CyberArk DNA, which is great."
"CyberArk Privileged Access Manager is more expensive than its competitors, such as BeyondTrust, Delinea, and ManageEngine PAM360."
"The price of CyberArk support could be a little bit less. Otherwise, pricing is fine."
"The price of CyberArk Privileged Access Manager could be less expensive."
"Our risk is definitely significantly lower. Also, our resources are low."
"It's not a cheap application. It's very expensive."
"The SaaS version of CyberArk Enterprise Password Vault is very expensive, but the on-premises version is relative, e.g. depending on the size of the environment, it can be a bit pricey, but it's relatively okay compared to the others."
report
Use our free recommendation engine to learn which Mainframe Security solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Government
18%
Financial Services Firm
16%
Manufacturing Company
10%
Outsourcing Company
7%
Outsourcing Company
12%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise43
Large Enterprise175
 

Questions from the Community

Ask a question
Earn 20 points
How does Sailpoint IdentityIQ compare with CyberArk PAM?
We evaluated Sailpoint IdentityIQ before ultimately choosing CyberArk. Sailpoint Identity Platform is a solution to manage risks in cloud enterprise environments. It automates and streamlines the m...
What is your experience regarding pricing and costs for CyberArk Privileged Access Manager?
The pricing is reasonable compared to other software options we evaluated, and it is straightforward. However, overall costs depend on deployment size and licensing requirements.
What needs improvement with CyberArk Privileged Access Manager?
While the access control capabilities are useful, streamlining some configuration and policy management workflows could enhance the user experience for administrators. A simpler interface for creat...
 

Also Known As

IBM RACF
CyberArk Privileged Access Security, CyberArk Enterprise Password Vault
 

Overview

 

Sample Customers

Information Not Available
Rockwell Automation
Find out what your peers are saying about IBM Resource Access Control Facility vs. Idira Privileged Access Manager and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.