---
title: Managerial Approval for User Connections to HTTP/HTTPS Devices
slug: kronpam-reference-guide-3-9-0/managerial-approval-for-user-connections-to-httphttps-devices
description: Learn how to enable managerial approval requests for device users, customize approval messages, and configure parameters in the HTTP Proxy configuration file with this informative document. Get step-by-step instructions for setting the "approvalRequiredFo
docTags: 
createdAt: 2022-07-28T12:14:32.000Z
---

To enable managerial approval requests via email or mobile notification for users connecting to devices, the **Require Managerial Approval** property must be set as **true** on the device group that includes the target devices.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/mSQJe1WBD_n6C-ZrnQfg4_image.png" size="76" width="713" height="878" position="center" caption="Require Manager Approval" showCaption="true"}

During the first login to webpages that require managerial approval for connection, an approval request email and/or a notification message are sent to the manager. If the manager approves it, the request is valid by default for 3600 seconds. Logging into the same webpage within this period does not require another approval.


Once this period (3600 seconds by default) has passed, a new approval email and notification message are sent to the manager for new login attempts. This duration can be set by editing the **http.proxy.managerial.approval.cache.seconds** parameter in the HTTP Proxy configuration file.


In addition, the messages displayed when users enter webpages requiring managerial approval can be edited by changing/entering the property values in the HTTP Proxy configuration file. The default settings are used when no changes are made. The table below lists the available values.


The parameters that can be configured for HTTP Proxy can be defined in the HTTP Proxy Configuration file by following these steps:

1. Establish an SSH connection to the Kron PAM server as pamuser, and enter the following command:
   **sudo vi /pam/http-proxy/conf/http\_proxy.properties**
2. Edit/add the related parameter.
3. Save the file and exit the vi editor.
4. Restart the HTTP Proxy using the command:
   **sudo systemctl restart pam-http**

| **Parameter Name**                       | **Description**                                                                             |
| ---------------------------------------- | ------------------------------------------------------------------------------------------- |
| **http.proxy.approval.rejected.message** | The message sent to the user if the manager rejects the request.                            |
| **http.proxy.approval.required.message** | The message indicating that managerial approval is required to access the specific webpage. |
| **http.proxy.waiting.manager.message**   | The message displayed when managerial approval is pending.                                  |

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/PEcHfYmZhesWw2A7MvvvZ_image.png)