---
title: Account & Group Creator Users
slug: kronpam-reference-guide-3-9-0/account-and-group-creator-users
description: Learn how to create your own static and dynamic accounts, except for SAPM STATIC Strategy, by reading this document. Discover the importance of Device Realm in creating all accounts and find out how Kron PAM Admin user plays a role in creating the Device 
docTags: 
createdAt: 2022-07-29T14:14:05.000Z
---

The user who created it can create their own static and dynamic accounts. A device realm is required when creating Vault accounts, except for certain static configurations. Each user-created account and group is private to the user. Other user groups need permission to view and manage these accounts and groups. To create a private account, the following parameters must be entered on the System Config Manager screen:

| **Parameter Name**                    | **Parameter Value**                          | **Description**                                                         |
| ------------------------------------- | -------------------------------------------- | ----------------------------------------------------------------------- |
| **sapm.private.option.default.value** | **YES**&#xD;<br />(Default value is NO)&#xD; | The parameter that creates the private account.                         |
| **sapm.private.option.hide**          | **true**<br />(Default value is false)&#xD;  | Parameter that removes the "private" field from the Vault Accounts tab. |

Creator user groups must have the following function groups:

| **Function Group**                  | **Description**                                                         |
| ----------------------------------- | ----------------------------------------------------------------------- |
| **SAPM Management**                 | The main Password Vault function group.                                 |
| **SAPM Account Module Visibility**  | Function group that grants the authority to see the Vault Account list. |
| **SAPM Group Module Visibility**    | Function group that grants the authority to see the Vault Group list.   |
| **SAPM Group Admin**                | Authorizes the user to create an account.                               |
| **SAPM Group Manager**              | Authorizes the user to create a group.                                  |
| **SAPM Historical Password Viewer** | Authorizes the user to see old password values.<br />                   |

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ryuBllOuMrdinXOgpMUMS_image.png "Creator User Portal Functions")