---
title: Policy Tracking
slug: kronpam-reference-guide-3-9-0/policy-tracking
description: Discover how the Policy Tracking menu in Kron PAM empowers users to effortlessly monitor Authentication and Authorization. Unleash the power of policy-based authentication and authorization logs on the Authentication and Authorization pages respectively. 
docTags: 
createdAt: 2022-07-27T11:00:02.000Z
---

The Policy Tracking menu allows Kron PAM users to monitor Authentication and Authorization. The search bar helps search for specific users' and user groups’ authorizations to specific devices or authentication methods on specific policies. The search can be narrowed down by including more details like **Host Information,** **Device Group Name**, etc.

### Authentication

The Authentication tab shows policy-based authentication logs used when connecting to devices.

1. Navigate to **Policy **> **Policy Tracking**.
2.
   Open the **Authentication** tab.
3.
   Fill in the fields to **Search** and click **Enter**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/5RU078k6oW-vQXJ4AR3ks_image.png "Policy Authentication")

### Authorization

The Authorization tab shows policy-based authorization logs used when executing commands on the target devices.

1. Navigate to** Policy **> **Policy Tracking**.
2. Open the **Authorization **tab.
3. Fill in the fields to filter and click **Search**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/zBguFvKOPbVeglRhixGTd_image.png "Policy Authorization")

### Search Requirements and Limitations

While using the Basic Search, at least one of the following parameters must be provided: 

User

User Groups 

Host IP/Name 

Device Group 

Assigned Credentials

If none of these fields are entered, Kron PAM will not execute the search.

For Advanced Search, it is recommended to define more detailed criteria to obtain accurate and optimized results.

### Vault Permissions

The Vault permissions page displays the user, device, and account details associated with the permissions.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-7P5NGqUxkckOeXu6D9Fl_image.png "Vault Permissions")