---
title: Adding Permissions to Password Vault Groups
slug: kronpam-reference-guide-3-8-0/adding-permissions-to-password-vault-groups
description: Learn how to assign permissions to SAPM (Simplified Account Provisioning and Management) groups with this comprehensive guide. Understand the options to assign permissions at the group level, including the ability to extend them to sub-groups, accounts wi
docTags: 
createdAt: 2022-07-29T09:27:46.000Z
---

Permissions for Password Vault accounts can be assigned to user groups or users as well.

After each permission is assigned at a group level, you will be asked if you would like the permissions to also be valid for sub-groups. You can select **Yes** or **No** to apply the rights to sub-groups or not, respectively.  Permission can be given to the Group, the Group and the accounts under it, or the Group Full Tree on the Password Vault Group Tree.

To assign Permissions to Password Vault Groups:

1. Navigate to **Secrets** **> Vault**.
2. Open the **Vault** tab.
3. Find the desired group in the group tree, and click the the** Options **button that appears when you hover the mouse cursor over the name of the group.
4. Select the **Permissions **option from the menu.
5. Assign the permissions to the groups, just like for individual accounts.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/8UHG_X5EIjNcnnGmIZY3x_image.png" size="70" width="853" height="822" position="center" caption="Adding Permissions to Password Vault Group" showCaption="true"}

**THIS ONLY**: Apply Permission to this group only.


**ONE LEVEL**: Apply Permission to this group and accounts inside this group.


**FULL TREE**: Apply Permission to this group and all inherited subgroups and accounts under them.