it is privileged access management that you are describing. One of the key requirements for compliance frameworks is also to record the user sessions. Authentication is one aspect of it, i think key problem is authorization too.