---
title: User Types for Internal and Secure Remote Access Users
slug: kronpam-reference-guide-3-6-0/user-types-for-internal-and-secure-remote-access-users
docTags: 
createdAt: 2024-12-04T12:50:49.248Z
---

In Kron PAM, the users are separated into **only internal**, **only external, **and **RemoteAccessEnabled** user types:

- The **only internal** user type can use Web GUI and Desktop Client to access the KronPAM servers and use all features **except for Secure Remote Access**.
- The **only external** user type can **solely use Secure Remote Access features**,
- The **RemoteAccessEnabled **user type can use **both Secure Remote Access and other features** together. 

Two Secure Remote Access boolean flags should be defined to handle user types. These flags are attached to user groups and users: 

- The boolean flag attached to the user group shows whether the members of the user group are ** RemoteAccessEnabled** or **only internal** user types altogether. This flag can be called **RemoteAccessEnabled**, and if this flag is True, the members of the user group are ** RemoteAccessEnabled** user types, if this flag is False, the members of the user group are **only internal** user types. 
- The boolean flag attached to the user shows whether the user is **only internal**, ** RemoteAccessEnabled**, or **only external** user type. This flag can be called **only external user**, and if this flag is True, the user is **only external** user type and if this flag is False, the user is either ** RemoteAccessEnabled** or **only internal** depending on his/her group **RemoteAccessEnabled’s** value.

| **RemoteAccessEnabled** | **only external user** | **User Type**           |
| ----------------------- | ---------------------- | ----------------------- |
| True                    | True                   | **only external**       |
| True                    | False                  | **RemoteAccessEnabled** |
| False                   | True                   | **only external**       |
| False                   | False                  | **only internal**       |