You can assign different permissions to a user group to define the different privileges the user has on the account. There are five types of SAPM permissions:

The user has full authority over the account.

Read Write has full access to the account, but unlike Full Control permission, it does not have the Permission option.

Manage Password is the authority to perform all password-related operations.

This permission type gives the user only the ability to see and reserve passwords.


List Only has the authority to view the account only, and it cannot take any action regarding the account.

Learn about the various user group permissions in SAPM with this comprehensive document. Discover the five different types of permissions and their corresponding access levels, including Full Control, Read Write, Manage Password, Read Only, and List Only.

Show Password

SAPM Permission Types

Password Reservation for Future Dates

Single Connect - End User Guide

End User Guides - 3.4.0

Registering as a New User

Logging in with Account Credentials

Logging in with LDAP, RADIUS, or TACACS+ Credentials

Logging in with SSH Key

Logging in to Kron PAM

Changing the Interface Language

Connecting Kron PAM with SSH/Telnet Proxy

Logging in with Session User via SSH/Telnet Proxy

Logging in Manually via SSH/Telnet Proxy

Logging in with Globalusername via SSH/Telnet Proxy

Logging in with Assigned Credentials via SSH/Telnet Proxy

Connecting Kron PAM with SSH/Telnet Proxy via Web GUI

Connecting to Devices with Managerial Approval via SSH

Command Filtering for SSH/Telnet Proxy

Admin Message and Kill Session

Connecting with SSH/Telnet Proxy

Connecting to Remote Devices with RDP/VNC Proxy

Accessing Remote Apps

Connecting to RDP/VNC Proxy via Kron PAM Windows Client

Connecting to Devices with Managerial Approval via RDP

Temporarily Disabling RDP Key Logging

Changing RDP Session Settings

Connecting with RDP/VNC Proxy

Connecting to Kron PAM HTTP/HTTPS Proxy via Web Browser

Configuring Kron PAM Desktop Client

HTTP Proxy SSL/TLS Mode

Brute Force Protection

Auto-Login with Two Different Authentication URLs under the Same Web Server

HTTP Auto Login

Connecting with HTTP/HTTPS Proxy

Connection Reservation

SQL Proxy

SFTP Proxy

Data Access Manager

Running Quick Commands

Script Player

Privileged Task Automation Manager

SAPM (Shared Accounts Password Management)

Password Vault

Multi-Factor Authentication (MFA)

Checking the Approval Status and Approving Manager of Pending Requests

Managing Approvals

Approval Management for End Users

TACACS+ Access Manager

RADIUS 802.1x Configuration

Kron PAM Remote Access Portal

End User Guide

Getting Started with Mobile Client

Two-Factor Authentication

Two-Factor Authorization

Approval Management

Password Management

Mobile Client User Guide

Setting Up Desktop Client for Windows

Changing the Desktop Client Language

Configuring a Server

Using HTTP Proxy in SSL/TLS Mode

Connecting to the Target Device via Desktop Client

Searching Target Devices in the Desktop Client

Adding the HTTP Proxy Certificate to The Trusted Certificate Store

Categorizing Frequently Used Devices

Logging Out

Starting Desktop Client from Command Line

Desktop Client for Windows User Guide

SAPM Permission Types

Full Control

Read Write

Manage Password

Read Only Permission

List Only Permission