---
title: Global Username/Password Connection
slug: kronpam-legacy-ui-reference-guide-3-5-0/global-usernamepassword-connection
description: Learn how to configure global user credentials for privileged users on a target device with this comprehensive document. Follow step-by-step instructions on setting up the global username and password in device group properties. Discover the priority rule
docTags: 
createdAt: 2022-07-27T12:21:30.000Z
---

Privileged users (such as root, superuser, etc.) in the target device are called Global Users. To establish an SSH connection using these accounts, and to make the global user password invisible to local users, the configuration outlined below must be in place, allowing Kron PAM to store the global user credentials to be used for the connection in its database.

1. Navigate to **Device Management** > **Device Groups**.
2. Right-click the device group and select the **Show Properties** option.
3. Set the privileged target device’s username as **globalUsername**.
4. Set the account password as **globalPassword**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/mjEM9JU_ObUKkm5s2UOJy_image.png "Global User Credentials")

When connecting to a device with a global username via an SC proxy, priority rules are applied:

- First priority: If there is a defined SAPM account, the SAPM password or the rotated SSH Key is used for the GlobalUser authentication. 
-
  Second priority: If the SAPM account is not defined, the global SSH Key is used to connect to the device. 
-
  If these two options are not defined in the device properties, the global password is used to connect to the device. The global password has the least priority.
-
  If the device requests both the SSH Key and password for authentication, the SAPM account password is used as first priority, and the globalPassword is used as second priority.