Privileged access management limitations include the lack of governance over machine identities, the inability to interpret what attackers can actually do IF they compromise a privileged account, and the inability to reveal the pathways of access to privileged accounts.