PrivX uses short-term credentials to provide just-in-time access to servers.

 Access is granted based on the user's role. Provisioned credentials are created on demand, only valid for a short time, and never stored to disk.
https://help.ssh.com/support/solutions/articles/36000036925-online-administrator-manual#idm46425099360512