---
title: OTP Elevation
slug: kronpam-agent-reference-guide-3-6-0/otp-elevation
docTags: 
createdAt: 2025-01-02T11:36:44.895Z
---

For managerial approval, if an application has an OTP elevation policy, when the end user clicks it below the time limit is asked. No reason is required for the OTP elevation, just a time limit is required.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/_-WpBwlysSCLHsnr4jVdj_image.png" size="54" width="411" height="340" position="center" caption="Just in time Access " alt="OTP" showCaption="true"}

When a time limit is chosen, the end user needs to enter OTP from the Kron PAM Mobile Client or Kron PAM GUI. The end-user has 3 rights to enter OTP. 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/mwSsh_lzl27fzqFNn2BPJ_image.png" size="54" width="344" height="223" position="center" caption="Just in time Access " alt="OTP" showCaption="true"}

When OTP is approved a notification pops up to the end user which says OTP is approved and another notification says time limit for usage of application.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ym7WFcSMfko4Ujvut5f5X_image.png" size="52" width="416" height="311" position="center" caption="Just in time Access " alt="OTP approved" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QOJa9CZM6q1JkHswIaseN_.blob" size="54" width="354" height="136" position="center" caption="Just in time Access " alt="OTP end user information" showCaption="true"}

:::hint{type="info"}
\* Maximum allowed time limit is 24 hours or 1440 minutes if custom is chosen.

\* Managerial Approval elevation and OTP Elevation Approval are online features. If the client is offline, those features are not going to work.

\* For Managerial Approval elevation, the Reason entered by the end user is seen on the Approval List of the manager.
:::