Permission profiles
Decide what a remote session may do on a computer — keyboard, mouse, clipboard, files, terminal, audio, restart and more.
Where:
/settings/permission-profilesWho: Workspace owners and adminsOn this page
Create a profile
- Press New profile.
- Enter a Name (e.g. “Support (no files)”) and Description (optional).
- Switch on Default for every session your team starts if this should apply to all sessions.
- Untick anything the session may not do (list below), then Save.
Permission
Allows
Keyboard
Type and send key combinations
Mouse
Move, click, scroll and draw
Clipboard
Copy and paste both ways
File transfer
Browse, upload, download, delete
Terminal
Open a remote shell
Hear sound
Play the computer's sound to the technician
Technician's microphone
Play the technician's voice on the computer
Restart / shut down
Reboot, safe-mode reboot, shut down
Privacy screen
Black out the computer's monitor
Block local input
Lock out the person at the computer
TCP tunnels
Port forwarding through the session
Remote printing
Send the computer's print jobs to the technician
Recording
Let the technician record the session
The list
Each profile shows Default if it is the default, and either Full access or Blocked: …. Edit with the pencil, delete with the bin. With no profiles: “No profiles — every session has full access”. The agent enforces the profile on the computer itself.
Related help
Permission profiles, “ask before connecting” and the connection manager
Control what sessions may do, when the person at the computer must approve, and how they can restrict or end a session while it runs.
Device details
One computer’s page: connect, open files or a terminal, lock, restart, shut down, wake it, rotate its password, manage unattended access and see its health.
