---
title: Session Log Control in SSH Proxy
slug: kronpam-legacy-ui-reference-guide-3-5-0/session-log-control-in-ssh-proxy
description: Learn how to log privileged users' sessions using the Kron PAM system. Discover how session logs can provide you with SSH session video records and command logs. Control access to these logs by configuring user groups and adjusting access settings through
docTags: 
createdAt: 2023-09-21T07:45:49.483Z
---

Kron PAM allows for privileged users’ sessions to be logged. There is detailed information related to the session logs in the Kron PAM LogsKron PAM Logs chapter of this document. If a user is authorized to view session logs, they can access both SSH session video records and command logs. Properties can be defined in the User Groups (refer to User Group Properties) To control which users are enabled access to session video records and command logs. To configure these settings:

1. Log in to the Kron PAM Web GUI.
2. Navigate to **User Management** >** User Accounts.**
3. Open the **User Group Definition** tab and click the search button to list all **User Groups**.
4. Right-click the desired **User Group**, and select **Show Properties.**
5. Add the parameters below:

| **Parameter**                        | **Definition**                                                                                                                                                                                                                         |
| ------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **sc.command.log.disabled**          | Controls enable command log viewing for users able to see session logs. The default value is **false**. If the parameter is **true**, the users in the related user group are disabled from viewing command logs.                      |
| **sc.session.video.record.disabled** | Controls enabling session video record viewing for users able to see session logs. The default value is **false**. If the parameter is **true**, the users in the related user group are disabled from viewing session video records.  |