User Types for Remote Privileged Access Management

In the Kron PAM, the users are separated into “only internal”, “external”, and “RPAM Enabled” user types:

·         The only internal user type can use Web GUI and Desktop Client to access the KronPAM servers and use all features except for Remote Privileged Access Management.

·         The external) user type can use Remote Privileged Access Management features and solely access device management on the Kron PAM Web GUI and Desktop Client (though over-permissions are granted to this user type, the user still can only access device management on the Kron PAM Web GUI and Desktop Client),

·         The RPAM Enabled user type can use both Remote Privileged Access Management and features on the Kron PAM Web GUI and Desktop Client together.





Two Remote Privileged Access Management Boolean flags should be defined to handle user types. These flags are attached to user groups and users:



·         The Boolean flag attached to the user group shows whether the members of the user group are RPAM Enabled or only internal user types altogether. This flag can be called RPAM Enabled, and if this flag is True, the members of the user group are RPAM Enabled user types, if this flag is False, the members of the user group are only internal user types.

·         The Boolean flag attached to the user shows whether the user is only internal, RPAM Enabled or external user type. This flag can be called RPAM Only, and if this flag is True, the user is external user type and if this flag is False, the user is either RPAM Enabled or only internal depending on his/her group RPAM Enabled’s value.