---
title: Managerial Approval for Connections 
slug: kronpam-reference-guide-3-4-0/managerial-approval-for-connections
description: Learn how to use the Connection Approval feature to manage user authentications for device connections. Set up an approval process for users to require managerial approval before connecting devices. Configure approval settings for user groups and device g
docTags: 
createdAt: 2022-07-27T11:12:29.000Z
---

The Connection Approval feature is used for setting up and managing user authentications in device connections (in RDP Proxy, SSH Proxy, SFTP Proxy, and HTTP Proxy). Admins can configure an approval process so that users will require managerial approval to connect devices. Connection approvals may be given by managers or members of user groups.


Managerial approval can be configured for either user groups or device groups:

-
  If managerial approval is configured for a user group, all users in that group will require managerial approval.
- If managerial approval is configured for a device group, all users will require managerial approval to connect to that device group.


To enable managerial approval for a user group:

1. Navigate to **Users**> **User Groups**.
2. Click the **Action** button and click on the **Edit Group**.
3. **Next**.
4. Navigate to Require Connection Approval.
5. Enable the **Required Managerial Approval from the Group Manager**.
6. Save.


To enable managerial approval for a device group:

1. Navigate to **Devices **> **Inventory**.
2. Click the **Action **button of the preferred Device Group and Edit.
3. **Next.**
4. Navigate to the Connection Approval Methods Part.
5. Enable **Required Managerial Approval **and **Save.**

:::hint{type="info"}
If you want to set up an approval process to manage connections of a specific group to a specific device group, you should configure an **Approval Workflow **instead of setting up **User Group** or **Device Group** parameters. Refer to the chapter for details.
:::

:::hint{type="info"}
If the requester is also the manager of the group and 
**auto.approve.when.requester.is.approver** is set as** true**, approval will be given automatically 
 and the connection will be established. Thus, the manager does not need to actively approve.
:::

:::hint{type="info"}
When you want to approve or reject connections via email, the manager receives an email
&#x20;including the header as this: \<instanceName> - Connection Approval Notification -
\#\<approvalID>
:::



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/eZZC00IE-yNtzTadIWltP_image.png "My Approval S")

:::hint{type="info"}
My approvals page shows request details and the Approver Manager, which helps me know who will be approving the request.
:::

:::hint{type="info"}
If the manager does not approve or reject connection requests and approval.status.change.to.expire is defined as min, the request status changes from **Waiting&#x20;**&#x74;o **Expired&#x20;**&#x6F;n my Approvals Page.
:::