---
title: Session Log Control in SSH Proxy
slug: kronpam-reference-guide-3-6-0/TlIH-session-log-control-in-ssh-proxy
description: Learn how to log privileged users' sessions using the Kron PAM system. Discover how session logs can provide you with SSH session video records and command logs. Control access to these logs by configuring user groups and adjusting access settings through
docTags: 
createdAt: 2023-09-21T07:45:49.483Z
---

Kron PAM allows for privileged users’ sessions to be logged. There is detailed information related to the session logs in the Kron PAM LogsKron PAM Logs chapter of this document. If a user is authorized to view session logs, they can access both SSH session video records and command logs. Properties can be defined in the User Groups (refer to [User Group Properties](docId\:qXR34rUvrs2F12w-rhS3B) ) To control which users are enabled access to session video records and command logs. To configure these settings:

1. Log in to the Kron PAM Web GUI.
2. Navigate to **Users**>** Users**
3. Click the desired **User Group**, and select its properties.
4. Click the **Add New Property.** 
5. Add the below parameters:

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6Cq0D24syjtlc95PHUORl_image.png" size="84" width="913" height="764" position="center" showCaption="false"}

| **Parameter**                        | **Definition**                                                                                                                                                                                                                         |
| ------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **sc.command.log.disabled**          | Controls enable command log viewing for users able to see session logs. The default value is **false**. If the parameter is **true**, the users in the related user group are disabled from viewing command logs.                      |
| **sc.session.video.record.disabled** | Controls enabling session video record viewing for users able to see session logs. The default value is **false**. If the parameter is **true**, the users in the related user group are disabled from viewing session video records.  |