Reference Guide
...
Single Sign-on (SSO)
Device Group Configuration in SSO
to utilize the sso feature effectively, the global username or assigned credential settings must be configured when a kron pam user with privileged access (e g , system admin, system) connects to databases, they can do so without needing the privileged user’s password always verify that the database user specified in the direct credential configuration has the necessary permissions for the intended operations