---
title: Adding Dynamic Accounts in Password Vault
slug: kronpam-reference-guide-3-8-0/adding-dynamic-accounts-in-password-vault
description: Learn how to configure and add a SAPM account for your system to define privileged users on target devices. Find out how a SAPM account establishes a secure connection and generates encrypted passwords. Follow the steps to add a Dynamic account in the SAP
docTags: 
createdAt: 2022-07-29T08:49:23.000Z
---

Authorized users can define the target devices’ users as Password Vault accounts. When configuring a dynamic Password Vault account, Kron PAM establishes a connection to the target system and changes the old password with a random password generated by the Password Vault. The new password is encrypted and stored on the Kron PAM database.
To add a Dynamic account:

1. Navigate to **Secrets > Vault.**
2. Open the **Vault **tab.
3. Click ** + Add **button and select **Add Account.** 
4. Select the **Type **(Dynamic), **Configuration **(type of the target system). Kron PAM has pre-defined configurations for Password Vault, but any device configuration can be added from the Configuration tab. This is detailed in the upcoming sections: Account Group Name, Owner of Vault,  Enter Account Name, Private, Enable /Disable Duallock, and Additional Information (Description, Secret Notes, Additional Info, and Account Tags).
5. Click** Next.**
6. Fill in the **Host **(IP/Name), **Change Period**, **username**, and **password **information. The combo box **Change Period** is available on the Vault Definition screen, and the admins can specify when the passwords are to be changed.
   - If the change period type is selected as **Periodic,** the **Change Period (Day)** textbox appears, and the Password change frequency information (in days) can be entered in that field.

::Image[]{src="https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/5-zRKok-TjFWqBjRT03Uu_image.png" size="100" width="784" height="543" position="center" caption="Adding Dynamic Accounts" showCaption="true" indent="3"}

- If the user selects **Recurrent **as the **Change Period **value, the **Recurrence Unit** combo box appears on the screen with the following choices:
  - Day
  - Week
  - Month

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/f1XC5337fE-AI_9S84fSU_image.png "Change Period Recurrent")

- If the recurrence unit is **week**, then all days of the week appear on the screen, and the days on which the password needs change can be selected. It is possible to select more than one day. Additionally, it is possible to define the time of day at which the password is desired to be changed from the **Starting Time** field.

::Image[]{src="https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Y82TR71_kW75wQr8hFT8-_image.png" size="66" width="434" height="666" position="center" caption="Change Period Recurrent - Week" showCaption="true"}

- If the recurrence unit is **month**, day of the month on which the password is to be changed needs to be selected. After selecting the **Day of Month** value, it is also necessary to choose how many months need to go by before the next password change is triggered automatically.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Rph9AIfhVqsw8pQiYxgRd_image.png" size="58" width="472" height="766" position="center" showCaption="false"}

- Private, Change the period, Owner, Username, Password, and Configuration. 
- Click **Save.**

:::hint{type="info"}
* If a **Change Period** value is defined in the **Vault Configurations screen**, when the relevant Configuration is selected in the Vault account definition screen, the parameters defined in the config are shown on the screen and cannot be changed by the user.
* The definitions made from the **Vault Configurations** screen have **absolute priority**. If there is a change in the values on a **Vault Configuration**, the values of all vault accounts belonging to this configuration will be updated when the first password change job runs.
  Chiefly, if a** Change Period **value is defined in the **Vault Configuration >** **Miscellaneous > Account Level Properties > Change Period **when the relevant Configuration is selected in the vault definition screen, this new Account Level Properties Change Period parameter will be most dominant for new accounts and can’t be changed by users.
:::