---
title: Assigning Single Connect Credentials to Target System Accounts
slug: reference-guide-3-0-0/assigning-single-connect-credentials-to-target-system-accounts
description: Learn how to configure and enable the Assigned Credential feature in Single Connect for your device group. This document provides step-by-step instructions for setting up assigned credentials using SAPM or Secret Data Vault accounts, ensuring secure SSH s
docTags: 
createdAt: 2022-07-27T12:53:20.000Z
---

 In some cases, Single Connect users are connected to target devices with different credentials. In other situations, there are more than one privileged user account in the target system and different user groups use different privileged accounts to log in to them. The Assigned Credential feature matches the Single Connect users with the target device users.


In the example below, User A wants to connect to the to the target system with Account X and User B wants to connect to the target device with Account Y. In this case, User A is assigned to Account X and User B is assigned to Account Y.


![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/fj7SIkDmY1xMQIz7jok3I_image.png "Assigned Credentials")

The following steps should be followed to configure the Assigned Credentials Feature and enable its use for a device group.

:::hint{type="info"}
This device group should be added to a device group realm with the user group including the users, beforehand.
:::

1. Log in to the Single Connect Web GUI as an admin user.
2. Navigate to **Device Management** > **Device Groups**.
3. Right-click the desired **Device Group **and select **Show Properties**.
4. Save the “addAssignedCredentialToUserSelection” property as “true”



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/01VHi2LET2gpWPD8vOcC4_image.png "Assigned Credential Configuration")

To set up the assigned credentials for different users, first save the SAPM or Secret Data Vault accounts. SAPM is used for passwords that are being rotated by the Password Manager, while the Secret Data Vault can be used for static usernames and passwords. After saving these accounts, follow these steps:

1. Log in to the Single Connect Web GUI as an admin user.
2. Configure the SAPM or Secret Data Vault account for the target system.
3. Navigate to **User Management **> **Assigned Credential**.
4. Start typing the username in the **User** text box. Matching users will appear below. Select the one for whom another credential will be assigned.
5. Select **SAPM** or **Secret Data Vault** as the Credential Source.
6. According to the selection, either select the **SAPM Username** or **Secret Data Vault** name and click **Save**.

Once these steps are completed, assigned credentials will be used for the connection whenever the defined users are trying to open an SSH session.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pZY_KKbpFjTvPs5Wf-_HH_image.png "Assigned Credential Configuration")