Priviledged Access Management (PAM)

Raspberry PI Connect
CLI only (without graphics) 
 Install PAM agent 
 sudo apt install rpi-connect-lite
 
 Enable PAM agent by desired user (normal user) 
 rpi-connect on
 
 Enroll (connect) device 
 rpi-connect signin
 
 
 Sign in with your account 
 
 Give name for device 
 
 Device connected 
 
 List devices 
 
 Connect to device 
 
 ref 
 https://www.raspberrypi.com/documentation/services/connect.html