---
title: User Group Definition Tab
slug: reference-guide-3-0-0/user-group-definition-tab
description: Learn about various features and settings related to user groups in this document. Explore the "Password TTL" feature that allows you to set a maximum time period for password use or choose to never expire passwords. Discover the "Autonomous Group" checkb
docTags: 
createdAt: 2022-08-03T10:11:40.000Z
---

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/weQvZ5-3EQsmkggNCZF7o_image.png" size="80" width="980" height="398" caption="User Group Definition features" position="center" showCaption="true"}

**Password TTL (Days):** Defines the maximum time allowed for the use of passwords for users in the configured user group. When a user's password reaches its TTL, they are forced to change it the next time they log in. Setting this feature as "**-1**" means that the password of the users in this group will never expire. If this value is set to "**0**" (zero) or left empty, the user group, and consequently the users, will be ignored during the password expiration control.

**Autonomous Group**: This checkbox defines the autonomous users’ group (e.g., script users). This group’s users may be excluded in RADIUS logs in order to avoid creating a log flood. These users’ passwords never expire.

**Direct Access**: When Single Connect is configured as a AAA or TACACS+ server for devices with AAA with TACACS+ protocol, the **Direct Access **checkbox needs to be checked. All connections should go through Single Connect.

**Console Access**: Similar to the **Direct Access** permission, this checkbox gives the AAA and TACACS+ devices console access.

**Admin Group**: This checkbox gives admin rights to all users belonging to that user group.

**Approval Required**: This checkbox sets a managerial approval requirement for SSH/RDP/SFTP connections
for all users belonging to the group. The Group Manager needs to approve the SSH/RDP/SFTP connections of other users.