---
title: User Types for Internal and Secure Remote Access Users
slug: kronpam-reference-guide-3-8-0/user-types-for-internal-and-secure-remote-access-users
docTags: 
createdAt: 2024-12-04T12:50:49.248Z
---

In Kron PAM, the users are separated into **only internal**, **only external, **and **RemoteAccessEnabled** user types:

- The **only internal** user type can use Web GUI and Desktop Client to access the KronPAM servers and use all features **except for Secure Remote Access**.
- The **only external** user type can **solely use Secure Remote Access features**.
- The **RemoteAccessEnabled **user type can use **both Secure Remote Access and other features** together. 

Two Secure Remote Access boolean flags should be defined to handle user types. These flags are attached to user groups and users: 

- The Boolean flag attached to the user group shows whether the members of the user group are **RemoteAccessEnabled** or **only internal** user types altogether. This flag can be called **RemoteAccessEnabled**, and if this flag is True, the members of the user group are** RemoteAccessEnabled** user types; if this flag is False, the members of the user group are **only internal** user types. 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/v3RFiQhe2Gf-7k4vdLH44_image.png" size="82" width="674" height="657" position="center" caption="Enable RemoteAccessEnabled Flag on the User Group" darkWidth="674" darkHeight="657" showCaption="true"}

- The Boolean flag attached to the user shows whether the user is **only internal**, ** RemoteAccessEnabled**, or **only an external** user type. This flag can be called **only external user**, and if this flag is True, the user is **only an external** user type, and if this flag is False, the user is either ** RemoteAccessEnabled** or **only internal,** depending on his/her group **RemoteAccessEnabled’s** value.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ocY6vuD4km5P5C77LQUQ1_image.png" size="64" width="630" height="638" position="center" caption="Enable Only External User Flag on the User " darkWidth="630" darkHeight="638" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/0KxwB7CkH1CgtFtwb82m8_image.png" size="84" width="620" height="434" position="center" caption="Enable/Disable Only External User Flag for all members of the User Group" darkWidth="620" darkHeight="434" showCaption="true"}

| **RemoteAccessEnabled** | **only external user** | **User Type**           |
| ----------------------- | ---------------------- | ----------------------- |
| True                    | True                   | **only external**       |
| True                    | False                  | **RemoteAccessEnabled** |
| False                   | True                   | **only external**       |
| False                   | False                  | **only internal**       |