---
title: Set Manual Password for Dynamic Vault Accounts
slug: kronpam-reference-guide-3-8-0/set-manual-password-for-dynamic-vault-accounts
docTags: 
createdAt: 2024-12-02T13:59:28.149Z
---

The Vault module periodically changes the passwords of the dynamic Vault accounts. The password generation algorithm in the password vault creates random passwords and assigns them to the accounts.

It is also possible to assign a password of your choosing to dynamic accounts for a specified duration. Once the manually assigned password expires, Kron PAM will automatically generate and assign a new random password.

To set a manual password for the dynamic Vault account, the **single.connect.sapm.set.password.manual **function is necessary to include in the function realm.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/DVkCtRMZqm0akwi4g9wG__image.png" size="76" width="944" height="370" position="center" caption="Function / Realm Definition Screen" showCaption="true"}

With this definition, users in the relevant group who have the **Manage Password** permission or higher will see the **Set Password** button enabled on the Vault screen. This button will be functional for **Vault **accounts of the **dynamic type. **

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Iq_AVxcwlQaZjGVsT8-H3_image.png" size="80" width="949" height="471" position="center" caption="User Definition Screen" showCaption="true"}

A parameter called **Set Password Manually **is on the **Vault Configuration > Password Change **group pop-up. 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n_llIBmP6oBtTt6YSZyxX_image.png" size="46" width="441" height="622" position="center" caption="Vault Configuration Definition Screen" showCaption="true"}

Suppose the user has the** Set Manual Password **function from the **Portal Definition **screen and the **Set Password Manually **option is set to **On **in the **Vault Configuration **screen. In that case, the **Set Manually Password** option will become available on the Vault Definition screen.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ICJZYJD-Yr3zz3JnFA-yf_image.png" size="84" width="755" height="364" position="center" caption="Vault Select Action Screen" showCaption="true"}

Even if this parameter is defined as **True **in the **Portal Function**, Kron PAM can ensure that some Vault Accounts cannot manually set passwords according to Vault Configurations.

If the** Set Manual Password** function isn’t defined as **False** on the **Portal Function** in this case system will not enable the user on the Vault Password Change popup even if **Set Password Manually** is defined as **True** on the Vault Configuration screen. 

When the user clicks the **Set Manual Password** button, a popup will appear for them to enter a new password. If no specific password configuration rule is defined for relevant Vault configuration, information will be displayed on the screen that the password will be set by default with **3 uppercase, 3 lowercase letters**, and **2 numbers.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/vsPaKr_krS3LGTXyqDfjW_image.png" size="44" width="496" height="562" position="center" showCaption="false"}

When the user enters the password value and clicks the **Next** button, a popup will appear where the user can select how long the password will be used and enter a comment.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/x8-D9oWXTCSZ_fg5raNoS_image.png" size="32" width="361" height="647" position="center" caption="Set Password Manually Duration Select Screen" showCaption="true"}

A new log type will be added to the Vault Log screen, and if a user performs the **Set Manual Password **action for any account, this will be logged as such.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/l0zhCKt7HSWYrVnQ0OIa4_image.png "Vault Log Listed Screen")