---
title: Adding Dynamic Accounts in SAPM
slug: kronpam-legacy-ui-reference-guide-3-5-0/adding-dynamic-accounts-in-sapm
description: Learn how to configure and add a SAPM account for your system to define privileged users on target devices. Find out how a SAPM account establishes a secure connection and generates encrypted passwords. Follow the steps to add a Dynamic account in the SAP
docTags: 
createdAt: 2022-07-29T08:49:23.000Z
---

To configure SAPM for any given system, a SAPM account needs to be added. Authorized users can define the target devices’ privileged users as SAPM accounts. By configuring a SAPM account, Kron PAM establishes a connection to the target system and changes the old password by generating a random password created by the SAPM. The new password is encrypted and stored in the SAPM database.
To add a Dynamic account:

1. Navigate to **SAPM Management **> **SAPM Management**.
2. Open the **SAPM Accounts** tab.
3. Enter the Type (Dynamic), Account Name, Description, Group Name, Host (IP/Name), Private, Change the period, Owner, Additional Info, Username, Password, and Configuration. (Configuration is the type of target system device. Kron PAM has pre-defined configurations for SAPM, but any device configuration can be added from the Configuration tab. This is detailed in the upcoming sections).
4. Click **Save** and **Confirm** the pop-up dialog box.

:::hint{type="info"}
If **Change Period** (day) is not set in the SAPM Accounts Tab, the **change.period.in.day** parameter value in the Configuration tab is used to change the password. 
If the SAPM Account **Change Period** and **change.period.in.day** parameter values are not set during configuration, an error will occur when changing the password.
:::

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pwzBMfXGyFjwdUkzDRuYC_image.png "Adding Dynamic Accounts")