---
title: Adding Dynamic Accounts in Password Vault
slug: kronpam-reference-guide-3-5-0/adding-dynamic-accounts-in-password-vault
description: Learn how to configure and add a SAPM account for your system to define privileged users on target devices. Find out how a SAPM account establishes a secure connection and generates encrypted passwords. Follow the steps to add a Dynamic account in the SAP
docTags: 
createdAt: 2022-07-29T08:49:23.000Z
---

To configure Password Vault for any given system, a Password Vault account needs to be added. Authorized users can define the target devices’ privileged users as Password Vaultaccounts. By configuring a Password Vault account, Kron PAM establishes a connection to the target system and changes the old password by generating a random password created by the Password Vault. The new password is encrypted and stored in the Kron PAM database.
To add a Dynamic account:

1. Navigate to **Secret > Vault.**
2. Open the **Vault **tab.
3. Click on to **Add **button and select **Add Account.**
4. Enter the Type (Dynamic), Account Name, Description, Group Name, Host (IP/Name), Private, Change the period, Owner, Additional Info, Username, Password and Configuration. (Configuration is the type of target system device. Kron PAM has pre-defined configurations for Password Vault, but any device configuration can be added from the Configuration tab. This is detailed in the upcoming sections)
5. Click** Save.**

:::hint{type="info"}
If **Change Period** (day) is not set in the Vault Tab, the **change.period.in.day** parameter value in the Configuration tab is used to change the password. 
If the Vault Account **Change Period** and **change.period.in.day** parameter values are not set during configuration, an error will occur when changing the password.
:::

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6OI4C0P_U_mdIKANdxMle_image.png" size="52" width="671" height="749" position="center" caption="Adding Dynamic Accounts" showCaption="true"}