---
title: Remote Privileged Access Management – LDAP Integration
slug: kronpam-reference-guide-3-9-0/remote-privileged-access-management-ldap-integration
docTags: 
createdAt: 2026-05-12T19:58:52.900Z
---

To assign users imported by Active Directory to different user types **(only internal, external or RPAM Enabled)** , the administrator must fill in the **External User Attribute** in the Advanced Filter section of the Add New LDAP Server sub-screen on the LDAP Integration screen.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/5CdeQ1t9VWqh_WnItr2CE_image.png "Figure – External User Attribute Field on LDAP Integration Screen")

**External User Attribute** field accepts the attribute name entered by the administrator. After the administrator fills the attribute name (e.g., **isExternal**) in the text field, Kron PAM imports LDAP users with different user types by considering the attribute's values. This attribute's possible values should be **external** or **true** or **1** for indicating **external** user type, or **internal** or **false** or **0** for indicating other user types. For example, if this attribute’s name is **isExternal**, the value of the attribute shows whether the user type is **only internal**, **external** or **RPAM Enabled**:

·         If the value is **external** or **true** or **1**, the user type is assigned **external** to the target user, and both **External User Count** and **User Count** values are increased by 1.

·         If the value is **internal** or **false** or **0**, and if the target user’s group has **RPAM Enabled** parameter with **true** value, the user type is assigned **RPAM Enabled** to the target user, and both **RPAM Enabled User Count** and **User Count** values are increased by 1.

·         If the value is **internal** or **false** or **0**, and if the target user’s group has **RPAM Enabled** parameter with **false** value, the user type is assigned **only internal** to the target user, and **User Count** value is increased by 1.