Skip to main content

Device management

The device module manages recorded devices and what they can access, including connection policies, assignable roles, and the path permissions used by those roles.

Features​

  1. Manage devices: search, filter, edit, and delete devices; configure inbound and outbound connection policies; and apply batch actions.
  2. Device roles: combine permissions into roles and assign them to devices allowed to access this device.
  3. Device permissions: enable reading, writing, deletion, renaming, and inheritance for specified paths.
  1. Manage devices: device lists, connection states, access roles, and single-device or batch actions.
  2. Device roles: create roles, select permissions, and use roles for device access control.
  3. Device permissions: maintain path permissions and their allowed operations.

Key concepts​

1. Managing devices​

  • Inbound access: how other devices are authorized when connecting to this device: Auto-approve, Require approval, or Always reject.
  • Access other devices: how this device initiates connections: Auto-connect or Ask before connecting.
  • Access role: the paths and actions available to another device after it connects. Shows Not set when no role is assigned.
  • Batch actions: change connection methods or roles for several devices, or delete selected devices.

2. Device roles​

A role is a collection of device permissions. Each role has a name, notes, and selected permissions. Create roles for use cases such as administrator or guest, then assign them in Manage devices.

3. Device permissions​

Permissions control file operations on a specified path. Each entry contains a path, notes, and controls for Apply to children, Read, Write, Delete, and Rename. Green controls indicate enabled permissions.

Recommendations​

  • Confirm the device and connection direction in Manage devices before checking its role and allowed paths.
  • Use Require approval or Always reject for unfamiliar devices' inbound access.
  • Enable only necessary path permissions. Assign the root path / only to an administrator role.
  • Test the policy and role on one device before making batch changes.