---
title: Approval Management
slug: kronpam-reference-guide-3-9-0/approval-management
description: Learn how to configure managerial approval for device connections, command executions, and SAPM password retrievals in Kron PAM. Set approval for device groups, user groups, or specific device group realms. Privileged users may need approval from higher-l
docTags: 
createdAt: 2022-07-27T11:10:34.000Z
---

Admins can configure managerial approval for device connections, command executions, and Vault password retrievals. Managerial device connection approval can be configured for all connections towards a device group, for all connections by a user group, or a specific device realm.


As a PAM service, Kron PAM enables the management of approvals for authentication and authorization. Users may have **privileged **rights defined to connect to specific devices or be privileged, commanding in-session policies with approval from a more privileged user.


Authentication and authorization requests for approval are managed from the dashboard. There are three types of approvals managed from this space: Vault, Connection, and Command.Managers can approve or reject received requests from here. Administrators can also manually trigger escalation after defining escalation settings described in the Approval Workflow steps. Managers who approved a request earlier can revoke their approvals by clicking the Cancel button.

1. Click on the **Kron PAM** logo to go to the dashboard.
2. Click the request’s **Action** button to approve, reject, escalate, or cancel the request.
3. The manager can opt to enter a comment about the approval/rejection of the request.