Reference Guide
...
Remote Access Configuration in...
User Types for Internal and Secure Remote Access Users
In Kron PAM, the users are separated into only internal, only external, and RemoteAccessEnabled user types:
- The only internal user type can use Web GUI and Desktop Client to access the KronPAM servers and use all features except for Secure Remote Access.
- The only external user type can solely use Secure Remote Access features,
- The RemoteAccessEnabled user type can use both Secure Remote Access and other features together.
Two Secure Remote Access boolean flags should be defined to handle user types. These flags are attached to user groups and users:
- The boolean flag attached to the user group shows whether the members of the user group are RemoteAccessEnabled or only internal user types altogether. This flag can be called RemoteAccessEnabled, and if this flag is True, the members of the user group are RemoteAccessEnabled user types, if this flag is False, the members of the user group are only internal user types.
- The boolean flag attached to the user shows whether the user is only internal, RemoteAccessEnabled, or only external user type. This flag can be called only external user, and if this flag is True, the user is only external user type and if this flag is False, the user is either RemoteAccessEnabled or only internal depending on his/her group RemoteAccessEnabled’s value.
RemoteAccessEnabled | only external user | User Type |
|---|---|---|
True | True | only external |
True | False | RemoteAccessEnabled |
False | True | only external |
False | False | only internal |