---
title: Configuring Kron DAM for Read-Only Access
slug: kronpam-reference-guide-3-9-0/configuring-kron-dam-for-read-only-access
docTags: 
createdAt: 2025-07-16T09:47:04.809Z
---

To enforce read-only and read-write modes for specific users or user groups, add the following properties in the Kron DAM GUI. These properties are set under Device Properties.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/2XoIYen6Vftv4hb6XFJto_image.png)

- **dam.ddm.server.clone.enforce.user.role: readonly**
- Enforces read-only behavior on the cloned port.
- **dam.ddm.server.enforce.user.groups**: **UG1,UG2**
- Defines the user groups forced to connect via the main (read-write) port. All users outside **UG1,UG2** are **not** allowed to connect on the read-write port.
- **dam.ddm.server.clone.bind-port**: **4001**
- The port number for read-only connections (the “cloned” port).
- **dam.ddm.server.clone.enforce.user.groups**: **UG3,UG4**
- Defines the user groups forced to connect via the read-only port. All users outside **UG3,UG4** are **not** allowed to connect on the read-only port.