---
title: Connection Reservation and Approval
slug: kronpam-reference-guide-3-7-0/connection-reservation-and-approval
docTags: 
createdAt: 2025-01-31T14:41:31.912Z
---

Within the SQL Proxy module, users are required to create a reservation when attempting to connect to a database. This reservation specifies the time frame for access and must be approved by a manager.

To create a connection reservation:

The policy group must contain approval definitions. First, create an Approval Workflow that indicates what to do if some kind of reservation is created.

1. Navigate to **Policy > Approval Workflow **then click** +Add **Button

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/oHhdNWePRB42fxq0ePF9Q_image.png "Approval Workflow Definitions")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/MZAevF-RPnyF3d0y1MDf4_image.png "Adding the definition to Policy Group")

Users must **log in **to the PAM interface. Specific user groups, such as MSSQL user groups, may exist, and members of these groups are required to obtain approval from a manager before accessing databases. 

Users** create a reservation **by selecting the target database and specifying a **Reason **for the connection. For example, users may need to perform tasks such as creating tables or retrieving data. This reason is communicated to the manager for approval. 

1. Navigate to **Devices > Reservation** and **Create a Reservation.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/im_ZOWIHiTbto-TuQbe4p_image.png "Creating a connection reservation.")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/3jPaXtgbH5Tlh6LEnZpIb_image.png "User gives a time interval")

The manager reviews the reservation request, which includes details such as the user’s name, the target database, and the reason for the request. The manager may approve, reject, or ignore the request. Without approval, the user will not be able to connect to the database. 

User Manager needs to:

- Navigate to the **Dashboard page** and approve the request in **My Approvals**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/XM8lTqGpKndP-wmbf7CJD_image.png "My Approvals dashboard")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-oPbTsp1mXOMYUvNHnZVV_image.png "Click Action Options then this pop-up will appear.")

Once the reservation is approved, the user is allowed to connect to the database within the specified time frame. During this session, additional policies may govern the queries that can be executed.