---
title: Session Log Control in SSH Proxy
slug: kronpam-reference-guide-3-9-0/session-log-control-in-ssh-proxy
description: Learn how to log privileged users' sessions using the Kron PAM system. Discover how session logs can provide you with SSH session video records and command logs. Control access to these logs by configuring user groups and adjusting access settings through
docTags: 
createdAt: 2023-09-21T07:45:49.483Z
---

Kron PAM allows for privileged users’ sessions to be logged. There is detailed information related to the session logs in the [Kron PAM Logs](docId\:WxBnO2VVLjECcnyY_1Zsi) chapter of this document. If a user is authorized to view session logs, they can access both SSH session video records and command logs. Properties can be defined in the User Groups (refer to [User Group Properties](docId\:PSFmiFchdVnLap90Zb_Uy)) to control which users are enabled access to session video records and command logs. To configure these settings:

1. Log in to the Kron PAM Web GUI.
2. Navigate to **Users**>** Users**
3. Click the desired **User Group**, and select its properties.
4. Click the **Add New Property.** 
5. Add the below parameters:

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6Cq0D24syjtlc95PHUORl_image.png" size="84" width="913" height="764" position="center" darkWidth="913" darkHeight="764" showCaption="false"}

| **Parameter**                        | **Definition**                                                                                                                                                                                                        |
| ------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **sc.command.log.disabled**          | Controls enable command log viewing for users able to see session logs. The default value is **false**. If the parameter is **true**, the users in the related user group will be blocked from viewing command logs.  |
| **sc.session.video.record.disabled** | Prevents session video recording. Default value is **false**. When set to **true**, session videos will not be recorded. This parameter controls recording itself, not viewing permissions.                           |

:::hint{type="warning"}
To enable encryption for video recordings, the parameter **session.record.encryption.enabled** should be set to **true **in the system configuration manager. Default value is **false**.
Setting this parameter to **true **will ensure that all session recordings are encrypted during storage. This parameter applies only to RDP and SSH proxy logs (HTTP proxy container-based session recording uses the infrastructure of RDP proxy).
:::