---
title: Group Manager Authorization via Email
slug: kronpam-legacy-ui-reference-guide-3-5-0/group-manager-authorization-via-email
description: Learn how to use the "Group Manager Authorization via Email" feature in Kron PAM proxies to streamline authorization management during sessions. Enable the "Approval via Email" action in your desired policy group by following these simple steps in the Pol
docTags: 
createdAt: 2022-07-28T12:22:22.000Z
---

The Group Manager Authorization via Email feature can be configured for Kron PAM proxies and helps to manage authorizations during sessions. To enable managerial approval for commands as an authorization policy, the desired policy group needs to have the **Approval via Email** action enabled.


To configure this feature:

1. Navigate to **Policy Control** > **Session Policy**.
2. Open the **Policy Group** tab.
3. Select the policies, choose **Approval via emai**l from the **Action Menu**, and click **Save**.
4. Configure the **Policy Realm** for the defined policy group as well.

This policy is used to get authorization from the group manager whenever a user runs a command configured with the **Group Manager Authorization via Email** feature. The group manager approves the request by clicking the link included in the email.


The **http.proxy.approval.email.timeout **parameter has been added under **/u01/http-proxy/conf/http\_proxy.properties**. This property represents the approval request selection timeout, in seconds, from the moment the approval request is produced. Approval requests are selected either if the current time is between the request start time and end time, or if the timeout does not expire.


Applicable for sc\_policy\_connection\_approval records in 'WAITING' or 'FIRST\_LEVEL\_APPROVED' status. Any value \<= 0 means no timeout. The default is 0. Example:
**http.proxy.approval.email.timeout**=0

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/wuhVOMcelrq66xB53Xbmj_image.png "Authorization Approval via Email")