---
title: Kron PAM Remote Privileged Access Management
slug: kronpam-end-user-guide-3-8-1/kron-pam-remote-privileged-access-management
description: The Kron PAM Remote Access Portal is a secure web portal that enables vendors to remotely access and manage devices within an internal network. Vendors receive a personalized email invitation containing a unique URL and passcode, granting them access to t
docTags: 
createdAt: 2023-10-18T08:15:52.152Z
---

The **Kron PAM Remote Privileged Access Management** contains a web portal that users can access remotely (SSH, RDP proxy, container-based HTTP/HTTPS) and manage devices in the internal network.

The Kron PAM Remote Privileged Access Management consists of the **Remote Access Portal** and the **Secure Remote Access Connector.**

The **Remote Access Portal** is a web-based access layer designed to serve privileged users, such as third-party contractors or remote employees, who require controlled access to internal corporate systems.The **Secure Remote Access Connector** acts as a controlled intermediary between the externally accessible **Remote Access Portal** and the internal Kron PAM infrastructure.

When the administrator sends a Remote Privileged Access Management invitation to selected users, those users receive an email with a URL and a passcode. When the access time has started, users can click on the URL, enter the passcode first, then enter the Kron PAM user password and start working.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/tL4w1FeFAFvjPRasyF92O_image.png "Mail Example for Invitation")

- Click the URL in the mail.
- Enter Passcode.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/i-Mp03_BvaWCfLP5TQA_J_image.png "Portal Passcode Page")

- Then enter the user's Kron PAM password.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/7EC9ihKZowSGityNHWv9O_image.png "Remote Access Portal's Login Page")

- Users can access to internal network by double-clicking.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/rHjblsyp-5cdIXyqaTPOj_image.png "Device List")

- Device connection will initiate in a new window.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/XnHmhfn40i88pptdCiNcy_image.png "SSH to the internal network")

- If the connection time has not started, you can not access the remote server.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Xh3R8vvf9q-oFSULMPv8S_image.png "Waiting Connection Time")

- If the OTP parameter (rap.client.otp.enabled) is set to **true**, after entering the Kron PAM user’s password, the user must enter the OTP value, which is accessible on the Kron PAM Mobile Client Application or email. 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/dJFkIq9p35s5je9w2KNsL_image.png "OTP Screen on the Remote Access Portal")