---
title: Split Password Feature
slug: singleconnect-reference-guide-3-1-0/split-password-feature
description: Learn how to implement a two-part approval process for a tan SAPM account password. Split the password and assign each part to different user groups, set permissions for accessing the password parts, and create a portal realm for both user groups. Retriev
docTags: 
createdAt: 2022-07-31T13:49:27.000Z
---

In order to secure the two-part approval process, tan SAPM account password can be split in two and each part retrieved by different users. After placing the users in different user groups, follow these steps:

1. Navigate to **Device Management** > **Device Groups**.
2. Open the** Device Group Realms** tab.
3. Create the **Device Group Realm** between the user groups and the device group containing the target device.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/qjxQ90NFMW6yR4JJXwN43_image.png "Device Group Realm for User Groups")

1. Navigate to** SAPM Management **> **SAPM Management**.
2. Search for the accounts.
3. Click the SAPM account **Options** button.
4. Select **Permissions** to open the permissions pop-up window.
5. Define the **READ\_ONLY\_FIRST\_PART **permission type for the user group that will receive the first part of the password.
6. Define the **READ\_ONLY\_SECOND\_PART** permission type for the user group that will receive the second part of the password.



::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/OONOM81I7h1XEYBAhWDMQ_image.png" size="68" width="510" height="317" caption="SAPM Permissions Set Up for User Groups" position="center" showCaption="true"}

1. Close the permissions pop-up window.
2. Navigate to **Policy Control** > **Portal Functions**.
3. Create a portal realm with the **SAPM Management** function group for both user groups.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/bu_VQiXrsTJlFNRmEa23A_image.png "Portal Functions Realm for the user groups")

After completing these steps, the users log in and retrieve their parts of the password from the SAPM Management section, just like with a normal password retrieval. They can log in to the target system using the SAPM username and the password combined in the correct order.


If one or two-level approval applies to the user, the user will receive the password part via email, once the approval process is completed.