---
title: Assigning Single Connect Credentials to Target Databases
slug: reference-guide-3-0-0/assigning-single-connect-credentials-to-target-databases
description: Learn how to enable the Assigned Credential feature in your target system with this step-by-step guide. By setting the addAssignedCredentialToUserSelection property as "true" for the Device Group and configuring SAPM or Secret Data Vault accounts, Single 
docTags: 
createdAt: 2022-08-01T17:14:17.000Z
---

In some cases, Single Connect users are connected to target devices with different credentials. In other cases, there are more than one privileged user accounts in the target system, and different user groups use different privileged accounts to log in to target systems. The Assigned Credential feature matches the Single Connect users with the target device users.


The following steps should be followed to configure the Assigned Credential feature. These steps enable Assigned Credential use for the device group with target databases.

1. Navigate to **Device Management **> **Device Groups**.
2. Right-click the desired **Device Group** and select **Show Properties**.
3. Set the **addAssignedCredentialToUserSelection** property as “true” and click **Save**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/bUJbX7Y_gus0aQKlPRRyL_image.png "Assigned Credential Feature Configuration")

To set up Assigned Credential for different users, the SAPM or Secret Data Vault accounts should be saved first. SAPM is used for passwords that are being rotated by the Password Manager, while the Secret Data Vault can be used for static usernames and passwords. After saving the SAPM or the Secret Data Vault accounts:

1. Configure the **SAPM **or **Secret Data Vault** account for the target system.
2. Navigate to **User Management** >** Assigned Credential**.
3. Start typing in the username in the **User **text box. Matching users will appear just below. Select the one for whom another credential will be assigned.
4. Select **SAPM** or **Secret Data Vault** as the Credential Source.
5. According to the selection, either select the **SAPM Username**” or **Secret Data Vault** name and click **Save**.

Once these steps are completed, assigned credentials will be used for the connection whenever the Single Connect users defined in these steps are trying to open an SSH session.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/z-vBmiPqvbLQT5G4Nez2__image.png "Assigned Credential Feature Configuration")

:::hint{type="info"}
Only one assigned credential must be defined for a specific database IP address for each user. If multiple assigned credentials are defined, log in fails.
Also, the Secret data vault and SAPM accounts must be defined for specific IP address.
:::