Approval Management

Admins can configure managerial approval for device connections, command executions, and Vault password retrievals. Managerial device connection approval can be configured for all connections towards a device group, for all connections by a user group, or a specific device realm.

As a PAM service, Kron PAM enables the management of approvals for authentication and authorization. Users may have privileged rights defined to connect to specific devices or be privileged, commanding in-session policies with approval from a more privileged user.

Authentication and authorization requests for approval are managed from the dashboard. There are three types of approvals managed from this space: Vault, Connection, and Command.Managers can approve or reject received requests from here. Administrators can also manually trigger escalation after defining escalation settings described in the Approval Workflow steps. Managers who approved a request earlier can revoke their approvals by clicking the Cancel button.