Global Settings

SECURITY  Refer to Setup > Global Settings in Permissions.

NAVIGATION  Setup > Global Settings

IMPORTANT  The settings described in this topic apply to your entire Datto RMM account.

Refer to My Settings for information about individual user details and preferences. Refer to Account Settings for information about Datto RMM account details.

This section allows you to control access to your Datto RMM account. Turn the options on or off as required or edit the Restricted IP List. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.

Field Description
Enable API Access Enables access to the Datto RMM API. By default, API access is disabled. Once it is enabled, API keys can be generated on a user-by-user basis. Refer to Edit a user in the legacy UI and Editing a user in the New UI.
New Device Approval This option is disabled by default. When it is enabled, any new device added to the Datto RMM account will require Administrator approval before the device can participate in the account activity. Disabling this option will immediately authorize all new devices currently pending approval. For more information, refer to New device approval - Legacy UI in the legacy UI and New Devices in the New UI.
IP Address Restriction Restricts access to the web interface to specific IP addresses. This option is disabled by default. Once this option is enabled, your current public IP address will automatically be added to the Restricted IP List. You can add more than one IP address to the list.
Agent IP Address Restriction Restricts access to the Agent Browser to specific IP addresses. This option is disabled by default. Once this option is enabled, your current public IP address will automatically be added to the Restricted IP List. You can add more than one IP address to the list. Refer to Agent Browser.
Restricted IP List When you enable the IP Address Restriction or Agent IP Address Restriction options, your current public IP address will automatically be added to the Restricted IP List. Click the plus or minus sign to update the list. One IPv4 Address may be entered on each line. Access to the web interface and the Agent Browser will be restricted to the IP addresses that appear in this list. An error message will be displayed if an invalid entry has been entered. Refer to Agent Browser.

This section allows you to set the amount of time that a user can be inactive before they are automatically logged out of Datto RMM: 

NOTE  Full-screen dashboards are excluded from the inactivity timer. For information about using dashboards in full-screen mode, refer to Dashboards toolbar.

Field Description
Logout Inactive User After Set the amount of time a user can be inactive in Datto RMM:
• 15 minutes
• 30 minutes
• 1 hour
• 2 hours
• 4 hours
• 8 hours

This section allows you to define how Agents communicate with the platform and perform network scans. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.

Field Description
Use alternative settings for Agent Toggle to be able to configure the settings listed below.
This field is displayed only for users with the Administrator security level and users with Manage permission for SETUP > Account Settings in the legacy UI. Refer to Security Level Details - Permissions.
Control Channel Address By default, this field should be left blank. In case a specific control channel address is needed for your account, contact your Datto RMM implementation manager.
Control Channel Port By default, this field should be left blank. In case a specific control channel port is needed for your account, contact your Datto RMM implementation manager. The port can be configured between 1 and 65,534.
Web Service Address By default, this field should be left blank. In case a specific web service address is needed for your account, contact your Datto RMM implementation manager.
Tunnel Server Address A tunnel server acts as an interface between devices for remote takeover sessions. Specify an IP or domain and a port to be used for the relayed connection by default. The IP or domain should be separated from the port by a colon (for example: 123.45.6.789:443). For more information about the tunnel server grid, refer to Connecting Agents through the tunnel server grid.
Network Subnet Limit

Limits the size of the scan an Agent performs in a single subnet. By default, the limit is set to 65,534, which is also the maximum number of IP addresses that an Agent is able to scan in a subnet. To disable network scanning for the entire account, set the value to 0.

NOTE  It is not possible to disable network scanning at the site level. For further information about network scanning, refer to Network Discovery.
Network Scan Limit The limit of devices that an Agent can scan on the subnet of the device. By default it is set to 1,024. Minimum value: 0; maximum value: 2,048.
For further information about Network Discovery, refer to Network Discovery.

This section allows you to specify a From Name and a Reply-To Address for email notifications sent by your Datto RMM account. These will be used in the From and To fields for response emails only. Configure the fields and click Save. To discard the changes, click Cancel.

NOTE  The Email Settings section can be saved if both fields contain values, if both fields are empty, or if the Reply-To Address field contains a valid email address and the From Name field is empty.
The Email Settings section cannot be saved if the From Name field contains a value and the Reply-To Address field is empty.

Field Description
From Name

Enter a name to be used in the From field of emails (for example: IT Support).
This field has a limit of 255 characters.

NOTE  Avoid entering an email address in this field, as it can confuse the email service and prevent the notifications from sending successfully. Enter an email address in the next field instead.
Reply-To Address Enter an email address to which you want your recipients to reply.

NOTE  The email field accepts the following characters:
a-z, A-Z, 0-9, @, and !#$%&'`*+-|/=?^_{}~.

This section allows you to specify one or more email recipients and define what type of email notifications they should receive.

NOTE  The user who registered the account is added as an email recipient by default, and all notification types are selected for this user.

NOTE  Email recipients of a particular site can be specified in the Email Recipients section in Creating or editing a site or the Email Recipients section in Site Settings.

To delete an email recipient, click the delete icon at the end of the row. To add one, click Add Email Recipient. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.

Field Description
Name Enter the recipient's name.
Address Enter the recipient's email address.

NOTE  The email field accepts the following characters:
a-z, A-Z, 0-9, @, and !#$%&'`*+-|/=?^_{}~.
Type Select the preferred email format for this recipient: Both, HTML, or Text.
Receives Select any of the notification types this recipient should receive: Alerts, ComStore Components, New Devices, or Reports.

NOTE  Selecting ComStore Components will opt you in to a Component Update Digest email notification. Refer to Check for updates.

You can specify variables that can be used when writing custom components. The variables can be defined with a specific value that the Agent will use when executing the script. How you refer to the variables in your script will be defined by the scripting language you apply (for example, in batch scripts, you can refer to a variable in the format of %VariableName%).

NOTE  Global variables used in components will be passed to jobs and monitors but will be overridden by site variables of the same name. You can specify site variables on the Site Settings page. Refer to Variables. You can also update multiple sites' variables in bulk using a CSV template. Refer to the Import Site Variables section of Global Settings.

To delete a variable, click the delete icon at the end of the row. To add one, click Add Variable. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.

Field Description
Name Enter a name. Make sure there is no space in the name of the variable. This field can be edited after saving the variable.
While site variables may share the same name as global variables, variable names must be unique at the site level and at the global level.
Value Enter a value. Variable value limit: 20,000 characters. This field can be edited after saving the variable.
Masked Select the check box to hide the value of the variable. Once a variable has been saved, this field can no longer be edited.

IMPORTANT  When extended logging is activated for log components, masked variables will be visible in clear text in the log file. Refer to Adding extended logging to Datto RMM.

Update one or more of your Managed sites' existing variables or add new variables by uploading a CSV file.

NOTE  Sites with OnDemand devices cannot be updated with variables.


You can upload any file with the .csv extension saved on your device. You may opt to use the pre-populated CSV template that contains every site you have permission to view in your Datto RMM account. The template is useful for quickly adding a single variable or for adding multiple variables at once to any number of sites. Complete the following steps to download, edit, and upload the site variables CSV template:

  1. Click Download Template.
  2. Open the CSV file you downloaded, and add the following information:
Field Description
Site ID The Site ID (site identifier) is hard-coded and cannot be changed or updated.
Site Name The name of your site. The name cannot be updated through the CSV file; however, it can be changed in Site Settings - Legacy UI in the legacy UI and in Site Settings in the New UI.
Site Description The description of your site. The description cannot be updated through the CSV file; however, it can be changed in Site Settings - Legacy UI in the legacy UI and in Site Settings in the New UI.
Variable Name Enter the name of the variable. It can be a new variable or an already existing one.

NOTE  This field is mandatory.
Variable Value Enter the value of the variable. It can be a new value or an already existing one.
Variable value limit: 20,000 characters.

NOTE  This field is mandatory.
Variable is Hidden If you would like to mask the variable value, enter 1. If you would not like to mask the variable value, enter 0.

NOTE  When adding a new variable and leaving this field blank, the variable value will not be masked.

NOTE  The variable_name and variable_value values in the CSV file are both mandatory in order for a site variable to be successfully imported.

  1. Save the file in CSV format.
  2. Click Import, and select the file you have just saved.
  3. Click Upload, and you will see a message that the site variables uploaded successfully. Or, click Cancel to remove any selected file.

NOTE  The Upload button is unavailable until a valid CSV file is imported.

The variables will appear in the Variables section in Site Settings.

This section allows you to rename the default label of 30 user-defined fields (UDFs). The UDFs can be populated with information that is not picked up in the device audit to provide additional targeting for jobs and policies. You can enter and edit UDF information manually on the Device summary page, or it can be populated by the Datto RMM Agent. For further information, refer to User-defined fields.

To rename a default UDF label, update the Global Label field. The change will be saved automatically.

NOTE  UDF labels have a limit of 22 characters.

NOTE  UDFs have a limit of 255 characters.

To reset a UDF label to its default value, click the Reset to default value icon at the end of the row.