Logical Architecture

The image above illustrates Kron PAM's interfaces, database, tenant management, modules, and supported protocols.

The Tenant Management interface allows system administrators to create, modify, and deactivate tenants. Upon tenant creation, the platform automatically provisions a dedicated schema at the database layer.

All tenant-specific entities—including configurations, logs, statistics, users, user groups, devices, device groups, policies, policy groups, device group realms, and policy realms—are stored within these isolated schemas to enforce strict data segregation and eliminate cross-tenant visibility.

Application modules dynamically resolve and interact only with the schema associated with the authenticated user’s tenant context, ensuring that all operations are executed within the appropriate tenant boundary.