---
title: Recycle Bin For Vault Accounts
slug: kronpam-reference-guide-3-9-0/recycle-bin-for-vault-accounts
docTags: 
createdAt: 2024-12-02T14:30:23.946Z
---

Kron PAM keeps a record of deleted Vault accounts and can restore them later. 

A group called Recycle Bin is present on the Vault screen under Unassigned Accounts. When the user deletes any Vault account, the deleted account will be automatically assigned to this group.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/qqV4YGZz6-NiM77ql26MW_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/tfUayn77fIWZo40pMz-Ml_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/So6zZtICDAi0XX9fbfUFD_image.png "Figure – Recycle Bin Group Screen")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/mnYGGdDccXw3H0EdcKeXb_image.png "System Configuration Manager")

1. A general parameter called **vault.account.recycle.bin.duration **can be set in the System Configuration Manager screen. This parameter stores the number of days after which the accounts moved to the Recycle Bin will be permanently deleted. 
   - Parameter Value: Defined\_by\_user (must be day)
   - The **RecycleBinJob **over at the Job Scheduler can be set to run every day to check accounts in the Recycle Bin group and permanently remove those whose time has expired.
2. If the time has not expired yet for deleted accounts, the user is able to list and restore them.

If the user selects Recover Account from the Recycle Bin, and wants to change the Vault account, there will be an **Account Name** field where the user can change the Vault account name.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/z_DpB7vkYyXnZBJGvzaUw_image.png "Restore Vault Account Option")

If the Vault account's group has been deleted before recovering the Vault account, Kron PAM will move the Vault account from Recycle Bin to Unassigned Accounts.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/defTOLPPPxo08mihtbzHo_image.png "Restore Vault Account Option")

When the user finds the account they want to recover from the Recycle Bin group and clicks on the Properties button, two buttons labeled **Restore Account** and **Permanently Delete** appear on the screen. If the user clicks the "Restore" button, the system makes the relevant account available for use again.  

If the **Permanently Delete** button is clicked, Kron PAM permanently deletes the account, and there will be no way to recover it.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/jV1xNIs_oDSf_Nl26k3DM_image.png" size="88" width="948" height="657" position="center" caption="Permanently Delete Vault Account Option" darkWidth="948" darkHeight="657" showCaption="true"}

- **Permanently Delete **action is allowed for the below users; 
  - PAM Admin
  - Owner of the Account
  - Password Vault Admin (Vault Admin)