Desktop Client User Guide
Password Vault Support in the Kron PAM Desktop Client
2 min
if the user has at least sapm account module visibility , sapm group module visibility, and “sapm management” portal privileges, the vault tab of the kron pam desktop client appears for this user if the user has only a “list only” account permission, the user cannot see the vault tab if the user has sufficient portal privileges and permissions, the user can list both vault account groups and vault accounts that are bound to these groups moreover, the user can search the vault accounts by using the filters under the vault account groups , there is at least one vault account, and each vault account is represented by a line that contains vault account name (e g , static ssl), vault configuration (e g , static ssl certificate), details button approval status (e g , need approval, waiting, no need approval, etc), connect to target device button (this button works as a target device button, similar to web gui) colorful check out button (might be check outpassword, check outssh key, etc, depending on the vault configuration) moreover, depending on the approval status, its color is changed lastly, the reset password button if the vault configuration is account with device (dynamic type) for the details of the password vault, please refer to the password vault section in the docid\ hgpjfizi0v6yroio9zqak if there is no approval flow for the static vault account, the user clicks the check out button to check out the passwords/ssh keys, etc, depending on the vault configuration if there is no approval flow for the dynamic vault account, once the user clicks the check out button, they should select the duration and write a comment before checking the password out if there is an approval flow for the dynamic or static vault account , before checking the password out, the requestee should send an approval request to do so, the user should click the check out button this time, it leads to another screen, and after the user enters duration and comments on this screen, the user should click the request approval button