---
title: Assigning Kron PAM Credentials to Target System Accounts1
slug: kronpam-legacy-ui-reference-guide-3-5-0/assigning-kron-pam-credentials-to-target-system-accounts1
description: Learn how to configure and use the Assigned Credential feature in Kron PAM with this step-by-step guide. This feature allows users to connect to target devices using different credentials and assign specific privileged user accounts to user groups. Save S
docTags: 
createdAt: 2022-07-27T15:23:10.000Z
---

 In some cases, Kron PAM users can be connected to target devices with different credentials. In other situations, there can be more than one privileged user account in the target system, with different user groups using different privileged accounts to log in to target systems. The Assigned Credential feature matches the Kron PAM users with target device users.

In the example below, User A wants to connect to the target system with Account X and User B wants to connect to the target device with Account Y. In this case, User A is assigned to Account X, and User B is assigned to Account Y.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ayJBQp3I-hYuHn_eFKThx_image.png "Assigned Credentials")

The following steps should be followed to configure the Assigned Credential feature and enable its use for a device group (this device group should be added to a device group realm with the user group including the users, beforehand).

1. Log in to the Kron PAM Web GUI as an admin user.
2. Navigate to** Device Management **>** Device Groups**.
3. Right-click the desired** Device Group **and select** Show Properties**.
4. Save the **addAssignedCredentialToUserSelection** property as **true**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2hdATixFyPgvx9AKntxG2_image.png" size="86" width="855" height="395" caption="Assigned Credential Configuration" position="center" showCaption="true"}

To set up assigned credentials for different users, first, save the SAPM accounts. Once these accounts are saved, follow these steps:

1. Log in to the Kron PAM Web GUI as an admin user.
2. Configure **SAPM** accounts for the target system.
3. Navigate to **User Management** > **Assigned Credential**.
4. Start typing the username in **the User** text box, matching users will appear below. Select the one for whom another credential will be assigned.
5. Select** SAPM** as the **Credential Source**.
6. According to the selection above, either select the **SAPM Username **and click **Save**.


After completing these steps, whenever the Kron PAM users defined in the steps above are attempting to open an RDP session, the assigned credentials can be used for the connection.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lW839DAoR8XYyBk-MUJ4s_image.png" size="90" width="980" height="311" caption="Assigned Credential Configuration" position="center" showCaption="true"}