The UVMs are designed to manage both, you can’t have one without the other. 

The solution, is just don’t configure Password Safe (which is also licensed differently) You will have to configure a small part of BeyondInsights for other users to logon with AD or Entra ID credentials or alternatively use local accounts to BeyondInsights.

What is the reason for choosing On-Prem, there are so many benefits from using PM Cloud?

The only good argument for not going PM Cloud is your environment is Air-Gabbed.

Note that it is always the Endpoint that initiate the connection to your UVM or PM Cloud, never the other way around.

Hi ​@Jens Hansen , thanks for the clear explanation regarding EPM Solution. Much appreciated it.

Having personally used both EPM/Password UVM (On-Prem) and PasswordSafe Cloud and PM Cloud, I highly recommend the cloud version over the on-prem. As your org grows you have to stand up more UVM’s meaning more license expense, as to where the cloud solutions autoscale for you.  The other aspect I really enjoy is leveraging Package Manager to manage updates for the client/adapter regardless of if a machine is connected to the corp network.

I could not agree more, just the maintenance of the UVMs is a cumbersome task. PM Cloud is first to marked with new features and the majority will never come to the On-Prem option.

oh yeah, thats another good point… all of the new features hit PM Cloud, and On-prem is kind of an after thought for them… not intentionally just the way the market has shifted as more and more customers move to PM Cloud… Another great thing to mention, is if you move from On-Prem to Cloud, since its a new instance you get setup with Pathfinder right away which bundles all of the applications into a single pane of glass, and I think you get access to identity insights with it….but I could be wrong in that aspect.. since I am a current cloud customer I am in line to get migrated over to pathfinder eventually :D

For me it was ensuring all of my systems were getting the updated applications and policies as I work in a highly mobile organization where some laptops only come online for a few minutes at a time so its been hard to get them to update otherwise.