---
title: Configuring SSMS for Read-Only Connections
slug: kronpam-reference-guide-3-7-0/configuring-ssms-for-read-only-connections
docTags: 
createdAt: 2025-01-31T14:29:28.242Z
---

When connecting to SQL Server via Kron PAM, SSMS users must include the **ApplicationIntent=ReadOnly** parameter to enforce the read-only mode. 

1. Open SQL Server Management Studio (SSMS).
2.  Open the Connect to Server Dialog.
3.  **Enter the Kron PAM Server Host and Cloned Port** in the **Server name** field.
4. Select your preferred **authentication mode** (e.g., Windows Authentication or SQL Server Authentication) from the Authentication dropdown menu.
5.  **Provide the Username** configured in Kron PAM (must match exactly, including domain or any prefix if applicable). 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yw7rcKcJGpu_rikoUXyHK_image.png" size="62" width="483" height="325" position="center" caption="Authentication mode and credentials" showCaption="true"}

:::hint{type="info"}
When a user is a member of a **forced read-only group**, Kron PAM automatically enforces the read-only connection on the cloned port. You do **not **need to add any additional parameters. (e.g., ApplicationIntent=ReadOnly). For **read-write** access, connect to the **original **Kron PAM SQL Proxy port and ensure you belong to a group that is **not **forced to read-only.
:::