Unlike other process automation tools, PAM has a fully functional client (known as a Touchpoint).
The custom operators (objects that make up processes) can be two types; calculations which are executed within the orchestrator engine, these can be written in JavaScript.
The first change that CA made to the tool was to include eTrust embedded entitlements manager (EEM).
A fully functional entitlement engine for the resources defined to PAM allowing specific allocation of access to groups and users.
The GUI is a Web application used to define processes and create custom operators graphically using drag and drop.