---
title: Adding Permissions to SAPM Groups
slug: kronpam-reference-guide-legacy-ui-3-4-0/adding-permissions-to-sapm-groups
description: Learn how to assign permissions to SAPM (Simplified Account Provisioning and Management) groups with this comprehensive guide. Understand the options to assign permissions at the group level, including the ability to extend them to sub-groups, accounts wi
docTags: 
createdAt: 2022-07-29T09:27:46.000Z
---

Permissions for SAPM accounts can be assigned to user groups or to users as well.


After each permission is assigned at a group level, you will be asked if you would like to assign the permissions to sub-groups or not. You can select **Yes** or **No **to apply the rights to sub-groups or not, respectively.  Permission can be given to the Group, the Group, and the accounts under it, or to the Group Full Tree on the SAPM Group Tree.


::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Bv9mg3kYnEC4rBeT5TIJO_image.png" size="54" width="523" height="456" caption="Adding Permissions to SAPM Group" position="center" showCaption="true"}

THIS ONLY: Apply Permission to this group only.


ONE LEVEL: Apply Permission to this group and accounts inside this group.


FULL TREE: Apply Permission to this group and all inherited subgroups and subaccounts.


To assign Permissions to SAPM Groups:

1. Navigate to **SAPM Management**.
2. Open the **SAPM Group Management** tab.
3. Right-click the desired group in the tree. Select the **Permissions** option from the drop-down menu.
4. Assign the permissions to the groups, just like for individual accounts.