---
title: Policy Management
slug: kronpam-reference-guide-3-8-0/policy-management
description: Learn about Kron PAM's innovative role-based management concept built on realms, facilitating effective administration of users, devices, and policies. Discover how policies apply to SSH/Telnet, SQL, and HTTP connections while having the advantage of not 
docTags: 
createdAt: 2022-07-26T15:24:00.000Z
---

Kron PAM’s role-based (user/device/policy) management concept is based on realms. In essence, individual user/devices/policies are collected under a group, and groups come together under a realm definition. Realms connect different types of groups, and by doing so, facilitate users' connection to devices abiding by policies. The diagram below illustrates Kron PAM's realm structure, which allows admins to manage specific users to authenticate on specific devices and authorize specific policies.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-nGYHTuve1C9wBy1wM_10_image.png "Role-Based Management Concept")

All session policies in Kron PAM can be managed from Kron PAM's central web interface. All policies assigned to a user can also be audited from the central interface.