---
title: Managerial Approval for Connections 
slug: kronpam-legacy-ui-reference-guide-3-5-0/managerial-approval-for-connections
description: Learn how to use the Connection Approval feature to manage user authentications for device connections. Set up an approval process for users to require managerial approval before connecting devices. Configure approval settings for user groups and device g
docTags: 
createdAt: 2022-07-27T11:12:29.000Z
---

The Connection Approval feature is used for setting up and managing user authentications in device connections (in RDP Proxy, SSH Proxy, SFTP Proxy, and HTTP Proxy). Admins can configure an approval process so that users will require managerial approval to connect devices. Connection approvals may be given by managers or members of user groups.


Managerial approval can be configured for either user groups or device groups:

-
  If managerial approval is configured for a user group, all users in that group will require managerial approval.
- If managerial approval is configured for a device group, all users will require managerial approval to connect to that device group.


To enable managerial approval for a user group:

1. Navigate to **User Management** > **User Groups**.
2. Click the Search button to list all groups
3. Click the **Options **button and select **Show Properties**.
4. Set the **approvalRequiredForConnection** parameter as **True**.


To enable managerial approval for a device group:

1. Navigate to **Device Management **> **Device Groups**.
2. Click the **Search **button to list all groups.
3. Click the **Options **button and select **Show Properties**.
4. Set the **approvalRequiredForConnection** parameter as** True**.

:::hint{type="info"}
If you want to set up an approval process to manage connections of a specific group to a specific device group, you should configure an **Approval Workflow **instead of setting up **User Group** or **Device Group** parameters. Refer to the chapter for details.
:::

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n18ZvacvX4hFd3goX53cD_image.png "Approval Management Page")

:::hint{type="info"}
The Approval Management page shows request details and the Approver Manager, which helps know who will be approving the request.
:::

:::hint{type="info"}
If the manager does not approve or reject connection requests and approval.status.change.to.expire is defined as min, the request status changes from **Waiting **to **Expired **on the Approval Management Page.
:::