--- title: Viewing Purchased Modules slug: kronpam-reference-guide-3-9-0/viewing-purchased-modules createdAt: 2026-10-06T05:17:44.935Z --- Open the **Purchased Modules** tab to view the capabilities enabled by the active license. Use **Search Modules** to filter the list. ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/TsFFdrFthpS5cdHeeSI-__image.png "Figure - Modules included in the active license") Module names are technical identifiers. Their presence shows that the related capability is licensed; this list does not show current usage or capacity. The following table describes every module in the supplied license-module reference. | Module Name | Licensed Capability | | ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | LINUX\_AUDIT\_REPORT | The Linux Audit Report provides a detailed report of users registered on target Linux systems. | | SC\_SNMP | The SNMP license enables commands captured by the Kron PAM policy to be sent to external systems via SNMP. | | SIEM | Enables Kron PAM logs to be sent to SIEM servers. | | SC\_USER\_LOCATION | Enables the use of the Geo-Location feature in SSH Proxy | | REPORTS\_VIEW\_ONLY | Enables the display of default dashboards and reports in Kron PAM. | | TFA | Enables Multi-Factor Authentication | | AIOC\_VRF | The VRF license enables connection to target devices from different network interfaces in environments with network segmentation. | | WINDOWS\_AUDIT\_REPORT | The Windows Audit Report provides a detailed report of users registered on target Windows systems. | | SC\_RDP\_PROXY | This module enables users to securely access remote Windows servers and applications over the RDP protocol through the proxy layer. It allows the definition and management of necessary permissions or restrictions, enforces session policies, and provides full user activity logging during Remote Desktop and RemoteApp connections. | | RDP\_OCR | Enables the capture of OCR logs in RDP connections. | | RDP\_KEY\_LOGGER | Enables the capture of keylogger logs in RDP connections. | | SC\_SFTP\_PROXY | This module enables users to define and manage necessary permissions or restrictions, log users, and perform other operations required to use the SFTP protocol with Winscp, Filezilla, and MOBA applications. | | SC\_CLI\_PROXY | This module enables the definition and management of necessary permissions or restrictions for users to connect to defined devices for SSH protocol , as well as the logging of users. | | SC\_HTTP\_PROXY | This module enables the definition and management of necessary permissions or restrictions for users to access the internet from their web browser environment, as well as the logging of users. | | SAPM | Enables to securely store and rotate shared privileged account passwords in the vault, supporting dynamic and static accounts with full checkout auditing and fine-grained access permissions. | | DAM\_ALARM | DAM Alarm enables to define and receive real-time alerts for database activities and security events. It provides a central screen to view, filter, and manage all generated alarms. | | SQL\_PROXY\_POSTGRESQL | SQL Proxy enables to PostgreSQL grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_POLICY\_ENFORCEMENT | SQL Proxy enables to define white/black key policies (regex or exact queries) to allow or block statements, then attach them to groups and realms. | | SQL\_PROXY\_LOGGING | SQL Proxy enables to all supported databases provide full session and query-level logging through the proxy, ensuring every connection and statement is captured with metadata. It records client info, timestamps, executed SQL, affected objects, and result metrics | | SQL\_PROXY\_MASKING | SQL Proxy enables to all supported databases apply dynamic data masking at runtime directly through the proxy, without modifying applications or database schemas. It enforces column/field-level masking rules based on user, group, or realm to prevent sensitive data exposure. | | SQL\_PROXY\_DB2 | SQL Proxy enables to DB2 grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_CASSANDRA | SQL Proxy enables to Cassandra grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_TERADATA | SQL Proxy enables to Teradata grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_HANA | SQL Proxy enables to SAP HANA grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_COUCHBASE | SQL Proxy enables to Couchbase grant connection permission via the proxy, assignable to users, groups, and realms. | | DAM\_Firewall | DAM Firewall enables to enforce real-time statement control at the proxy layer, allowing or denying database commands before they reach the engine. It is a defend point for buffer overflow and rate limit in context of user, IP and Database. | | SQL\_PROXY\_ORACLE | SQL Proxy enables to Oracle grant connection permission via the proxy, assignable to users, groups, and realms. Oracle (including RAC) clients | | SQL\_PROXY\_HIVE | SQL Proxy enables to Hive grant connection permission via the proxy, assignable to users, groups, and realms. | | SQL\_PROXY\_MYSQL | SQL Proxy enables to MySQL grant connection permission via the proxy, assignable to users, groups, and realms. | | SC\_SQL\_PROXY | SQL Proxy enables to all supported databases grant connection permission via the proxy, assignable to users, groups, and realms. It provides the central admission point (proxy bind port) that gates database connectivity under a single control plane. | | SQL\_PROXY\_MSSQL | SQL Proxy enables to MSSQL grant connection permission via the proxy, assignable to users, groups, and realms. | | DAM\_Object\_Explorer | DAM Object Explorer enables to visualize database structures discovered during monitoring, including schemas, tables, views, and columns. | | DAM\_SQLinjection | DAM SQL Injection module enables to detect and block SQL injection detection via regex in real time at the proxy layer. | | DATABASE\_AUDIT\_REPORT | Database Audit Report enables to provide two separate screens: a Database Audit screen for account and configuration checks, and a Vulnerability Scanner screen for detecting weaknesses, missing patches, and security gaps across supported databases. | | SENSITIVE\_DATA\_DISCOVERY | Scans schemas/tables/columns for sensitive data using regex and dictionary-based patterns, with scheduling and bulk import of custom types. | | CONNECTOR\_BUILTIN\_VPN | Connector enables to create a built-in UDP-based VPN tunnel between PAM and remote networks via the connector host, without requiring any external OpenVPN installation. | | RPAM | RPAM enables to provide time-limited, browser-based remote access links to devices reachable by PAM. | | SC\_CONTAINER | This module enables users to access the internet via Docker Container, records their activities on the website with video recordings and logs, and allows these recordings to be shown to the relevant users later. | | AAPM | Enables applications and scripts to retrieve SAPM-managed passwords from the vault at runtime through token-based REST APIs, eliminating hard-coded credentials in code, configuration files, and environments. | | REPORTS | Enables the Reporting screen (Superset) for users to set up custom reports, and view the default reports | | CONNECTOR\_OPEN\_VPN | Connector enables to establish a site-to-site VPN tunnel between PAM and remote networks using OpenVPN installed on the connector host. Will remove in future releases! | | CIEM | CIEM enables to aggregate cloud accounts, resources, and entitlements from connected cloud providers into a single inventory dashboard and to flag security risks such as missing MFA or unused/high-risk identities. | | RADIUS | RADIUS-based authentication processes can be actively used for network devices. Thanks to this, all RADIUS accounting logs generated during the session can be easily accessed through the system. | | TACACS | TACACS delivers centralized Authentication, Authorization, and Accounting (AAA) for network devices. It allows administrators to control who can access the devices, define their permission levels, and track all user actions in a detailed and secure way. | | WINDOWS\_AGENT | Windows EPM provides policy-based control over application execution, privilege elevation, and endpoint hardening on Windows desktops and servers. It helps organizations reduce local admin usage and enforce least-privilege access while maintaining user productivity. | | LINUX\_AGENT | Linux EPM delivers command-level privilege control, script/application allowlisting, and configuration enforcement across Linux endpoints. It enables secure operational workflows by restricting unauthorized commands and elevating privileges only when required | | ML\_THREAT\_ANALYTICS | Enables machine-learning–based Threat Analytics to automatically detect anomalies and high-risk threats. | | AI\_CHATBOT | Enables an AI-powered chatbot interface so operators can query Kron PAM (alerts, sessions, users, etc.) in natural language. | | KEYSTROKE\_ANOMALY\_DETECTION | Enables keystroke-dynamics–based behavioral MFA on the Kron PAM login screen, learning each user’s typing pattern and allowing them to log in without additional MFA when their typing matches the trusted profile. | | SCRIPT\_DESIGNER | Script Designer license enables the use of the Privileged Task Automation script designer module. | | COMMAND\_UTILITY | Provides utilities for executing commands across the network, aiding system management and operations. | | MT\_ON\_BEHALF\_OF | Enables host-side users to manage tenant environments (users, policies, etc.) from the host context on behalf of tenant admins; it is available only together with MULTITENANCY. | | MULTITENANCY | Enables to run multiple isolated PAM tenant environments on a single platform and allocate licensed users and other capacity separately for each tenant. | | SC\_USER\_BEHAVIOR\_ANALYTIC | Enables machine-learning–based Threat Analytics to automatically detect anomalies and high-risk threats. |