---
title: SAPM Account Permissions
slug: singleconnect-reference-guide-3-1-0/sapm-account-permissions
description: Learn how to assign authorization levels to user groups for SAPM accounts using Single Connect in this step-by-step document. Discover different permission types such as read-only, manage password, and full control and how multiple permissions can be assi
docTags: 
createdAt: 2022-07-29T09:10:04.000Z
---

Single Connect administrators can assign different authorization levels to different user groups for SAPM accounts. For example, a user group can get full control rights for a SAPM account, while another user group can have list only rights.
To set permissions to SAPM accounts:

1. Navigate to **SAPM Management** > **SAPM Management**.
2. Open the **SAPM Accounts** tab.
3. Select the account to set permissions for, click the **Options** button, and select **Permissions**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Y38h0BZOSmS5pNDmPONAj_image.png "Permissions option for an SAPM Account")

- Select the user group and the permission(s).
- Click **Save**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xIUml2TZ23zX7Obr_qXDy_image.png" size="48" width="398" height="345" caption="SAPM Permissions" position="center" showCaption="true"}

*Permission Types:*


LIST\_ONLY: To only have the authority to see the account of the SAPM.


READ\_ONLY\_FIRST\_PART: To only have the authority to see the first half of the SAPM password.


READ\_ONLY\_SECOND\_PART: To only have the authority to see the second half of the SAPM password.


READ\_ONLY: To only have the authority to see the SAPM password.


MANAGE\_PASSWORD: To only have the authority to manage the SAPM password.


READ\_WRITE: To have full control permission, except for the edit account option.


FULL\_CONTROL: To have full control. Applies to admins of this SAPM account. These users have full authority for actions such as resetting, changing the password, and giving permission to other users.


Multiple permissions can be assigned to a User Group. According to the permission levels, users will access the accounts with the highest permission, with those rights.


One user can be a member of multiple user groups with different rights. In this case the following permission order will apply:


FULL\_CONTROL > READ\_WRITE > MANAGE\_PASSWORD > READ\_ONLY > READ\_ONLY\_FIRST\_PART > READ\_ONLY\_SECOND\_PART > LIST\_ONLY


If authorized users are assigned to SAPM Management, the Single Connect administrator must define the following parameter in the system config manager to authorize their own accounts to access other user groups:

| **Parameter Name**                     | **Parameter Value** |
| -------------------------------------- | ------------------- |
| **sapm.all.usergroup.seen.permission** | true                |