---
title: Global Username/Password Connection
slug: kronpam-reference-guide-3-6-0/global-usernamepassword-connection
description: Learn how to configure global user credentials for privileged users on a target device with this comprehensive document. Follow step-by-step instructions on setting up the global username and password in device group properties. Discover the priority rule
docTags: 
createdAt: 2022-07-27T12:21:30.000Z
---

Privileged users (such as root, superuser, etc.) in the target device are called Global Users. To establish an SSH connection using these accounts, and to make the global user password invisible to local users, the configuration outlined below must be in place, allowing Kron PAM to store the global user credentials to be used for the connection in its database.

1. Navigate to **Devices**> **Inventory**.
2. Click the device group and select the **Show Properties** option.
3. Click the **Edit **button.
4. Under **Direct Credential** set the username.
5. Set the password.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/kWM1Zr1jLPC8KqgFhCIhk_image.png" size="72" width="657" height="981" position="center" showCaption="false"}

When connecting to a device with a Direct Credentials, priority rules are applied:

- Priority: If a Vault account is defined, the Vault password or the rotated SSH key will be used for GlobalUser authentication.
- Second Priority: If a Vault account is not defined, the global SSH key will be used to connect to the device.
- If these two options are not defined in the device properties, the Direct Credential Password will be used to connect to the device. The Direct Credential Password has the lowest priority.
- If the device requests both the SSH key and password for authentication, the Vault account password will be used with the highest priority, and the Direct Credential Password will be used as the second priority.