Selecting Multiple Devices or Device Groups
The Advanced Apply For field lets you assign a credential to more than one Device or Device Group at the same time, and you can combine both types in a single selection. For example, you can apply one credential to two individual devices and one device group in the same Assigned Credential record.
Selected items appear as removable tags inside the field:
- Each tag shows the device or device group name and closes with the x icon next to it.
- When there are more tags than the field can display, the extra selections collapse into a single +N item… tag.
- Click the expand icon next to Advanced Apply For to open the full selection panel. This panel adds a Type to filter… search box so you can find items in a long device or device group list, plus two bulk actions: Clear filtered removes only the items that match your current search text, and Clear all removes every selected item regardless of the filter.
When you select multiple devices or device groups, Kron PAM creates a separate Assigned Credential record for each selection. Each record is listed as an independent row in the Assigned Credentials table, with the same User and Vault Account but a different Device Name or Device Group Name.
This behavior is the same whether you create a new assigned credential or edit an existing one. Selecting additional devices or device groups while editing an assigned credential also creates a new record for each selection; it does not overwrite the existing entry.
To assign a credential to multiple devices or device groups:
- Navigate to Users > Assigned Credentials and click Add. To add selections to an existing assignment instead, open its action menu and select Edit Assigned Credential.
- Select the user or user group in User Selection.
- Select the account in Vault Account.
- Enable Apply For All Devices to assign the credential to every device. Leave it off to choose specific devices and device groups in Advanced Apply For.
- In Advanced Apply For, select one or more devices or device groups. Click the expand icon to open the full list if you need to filter it or manage a large number of selections.
- Optionally, enable Specified Time Interval to
- Click Save.
Kron PAM creates one Assigned Credential record per selected device or device group and lists them separately in the Assigned Credentials table.
