Reference Guide
...
RDP Proxy Connections
Global Username/Password Connections
privileged users (such as administrators) in the target device are called global users to establish an rdp connection using these accounts and to make the global user’s password invisible to the local user, the configuration below is required, allowing kron pam to store the global user credentials in its database and use it for the connection navigate to devices > inventory > device groups right click the device group and select the edit option set the privileged target device username as username set the account password as password