---
title: Adding Dynamic Accounts in Password Vault
slug: kronpam-reference-guide-3-9-0/adding-dynamic-accounts-in-password-vault
description: Learn how to configure and add a SAPM account for your system to define privileged users on target devices. Find out how a SAPM account establishes a secure connection and generates encrypted passwords. Follow the steps to add a Dynamic account in the SAP
docTags: 
createdAt: 2022-07-29T08:49:23.000Z
---

To configure the Password Vault for a given system, add a Password Vault account. Authorized users can define target devices' privileged users as Password Vault accounts. When you configure a Password Vault account, Kron PAM connects to the target system and replaces the old password with a random password generated by the Password Vault. The new password is encrypted and stored in the Kron PAM database.

To add a dynamic account:

1.      Navigate to **Secrets** > **Vault**.

2.      Open the **Vault** tab.

3.      Click **+Add** and select **Add Account**.

4.      Select the **Type** (*Dynamic*), **Account Subtype **(*Persistent*), **Configuration** (the type of the target system), **Account Group Name**, and **Owner of Vault**. Enter the **Account Name**, set **Private** and **Enable/Disable Duallock**, and complete the **Additional Information** fields (**Description**, **Secret Notes**, **Additional Info**, and **Account Tags**).

5.      Click **Next**.

6.      Fill in the **Host (IP/Name)**, **Change Period**, username, and password fields. In the **Change Period** list, specify when to change the password.

:::Paragraph{indent="1"}
If you select *Periodic* for **Change Period**, a **Change Period Day** field appears. Enter the number of days between password changes in that field.
:::

\_\_\_Authorized users can define the target devices’ users as Password Vault accounts. When configuring a dynamic Password Vault account, Kron PAM establishes a connection to the target system and changes the old password with a random password generated by the Password Vault. The new password is encrypted and stored on the Kron PAM database.
To add a Dynamic account:

1. Navigate to **Secrets > Vault.**
2. Open the **Vault **tab.
3. Click the ** + Add **button and select **Add Account.** 
4. Select the **Type **(Dynamic), **Configuration **(type of the target system), Account Group Name, Owner of Vault, Enter Account Name, Private, Enable/Disable Duallock, and Additional Information (Description, Secret Notes, Additional Info, and Account Tags).
5. Click** Next.**
6. Fill in the **Host **(IP/Name), **Change Period**, **username**, and **password **information. From the combo box **Change Period**, users can specify when the passwords are to be changed.
   - If the change period type is selected as **Periodic,** the **Change Period (Day)** textbox appears, and the Password change frequency information (in days) can be entered in that field.

::Image[]{src="https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/5-zRKok-TjFWqBjRT03Uu_image.png" size="100" width="784" height="543" position="center" caption="Adding Dynamic Accounts" darkWidth="784" darkHeight="543" showCaption="true" indent="3"}

If you select *Recurrent* for **Change Period**, the **Recurrence Unit** list appears with the following options:

:::Paragraph{listStyleType="disc" indent="2"}
Day
:::

:::Paragraph{listStyleType="disc" indent="2"}
Week
:::

:::Paragraph{listStyleType="disc" indent="2"}
Month
:::

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/f1XC5337fE-AI_9S84fSU_image.png "Change Period Recurrent")

- If the recurrence unit is week, all days of the week appear on the screen, and you can select the days on which to change the password. You can select more than one day. You can also set the time to change the password in the **Starting Time** field.

::Image[]{src="https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Y82TR71_kW75wQr8hFT8-_image.png" size="60" width="434" height="666" position="center" caption="Change Period Recurrent - Week" darkWidth="434" darkHeight="666" showCaption="true"}

- If the recurrence unit is month, select the day of the month on which to change the password. After you select the **Day of Month** value, also choose how many months must pass before the next password change triggers automatically.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Rph9AIfhVqsw8pQiYxgRd_image.png" size="60" width="472" height="766" position="center" darkWidth="472" darkHeight="766" showCaption="false"}

- Click **Save.**

:::hint{type="info"}
* If a **Change Period** value is defined in the Vault Configurations screen, its parameters appear on the screen when you select that configuration in the Vault account definition screen, and you cannot change them.
* Definitions Configuration's values change, Kron PAM updates the corresponding values of all Vault Accounts that belong to this configuration when the first password change job runs. If a **Change Period** value is defined in **Vault Configuration** > **Miscellaneous** > **Account Level Properties** > **Change Period**, this parameter takes priority for new accounts when you select that configuration in the Vault definition screen, and users cannot change it.
:::