but do you say that you have user that uses PDM and his/her rights are there or did you mean that PDM has username created for it and it's name is pdm-user?

if that is just some user that is logged in to the machine logoff script is best for you.