Security levels

SECURITY  Administrator

NAVIGATION  Setup > Security Levels

About security levels

Security levels specify and limit the access users have when logged in to the Datto RMM web interface, the Agent Browser, or a Web Remote session. Users can have more than one security level and change them as needed. Security levels can be added, edited, copied, and deleted in both the current UI and the New UI. Users can switch security levels in the current UI, the New UI, and the Agent Browser.

IMPORTANT  You must have Administrator security level to be able to add, edit, copy, or delete a security level. For further information, refer to Users.

Administrator security level

By default, Administrator security level is assigned to the user who registers a Datto RMM account, and it is the only security level available to assign to new users until other security levels are created. The Administrator security level cannot be modified or edited in any way. Users who have this security level assigned have full and unlimited access to all Datto RMM functionality and can see and connect to all devices in the Datto RMM account.

How to...

  1. In the Web Portal, click the Setup tab.
  2. Click Security Levels.
  3. Click New Security Level on the left-hand side of the page.
  1. If you would like to copy an already existing security level to use it as a template, you can choose it from the Based On drop-down list. To create a new one, select New Security Level.
  1. Give the security level a Name and a Description.
  2. Click Save.
  1. On the Security Level Details page, select the options applicable to the new security level.
    Expand each of these sections: Device Visibility, Permissions, Remote Control Tools, and Membership.
    See below for further details on each section.
  1. Click Apply and Save to finish creating the security level.

This section controls which devices the security level has access to.
Turn on the options to include specific Sites, Site Device Groups, Device Groups, or Site Groups, and include or exclude certain sites or groups.

IMPORTANT  Alerts are not visible in the New UI for users with a security level that only has Device Groups configured in the Device visibility section. In the New UI, users must have permission to see a site in order to see devices within that site and alerts associated with devices.

Turn on permissions for Account, Sites, Components, ComStore, Jobs, Reports, and Setup, and then check None, View, or Manage permission for each area. You can configure the same permission for each area within a section with one click in the top row of the table. When creating a new security level, permissions are set to View for all areas by default.

IMPORTANT  Users will be unable to log in if None permission is selected for all areas in their security level's Permissions section.

IMPORTANT  The Account and Setup tabs in the current UI will be grayed out if None permission is selected for all areas within Account (current UI) or Global (New UI) and Setup, respectively.

  None View Manage
Dashboard Current UI:
The Account > Dashboard menu or tab is not displayed.		 Current UI:
The Account > Dashboard menu or tab is displayed. Depending on sites visibility (toggled OFF, for example), the information shown may be limited in scope.		 Current UI:
Same as for View permission.
Audit Current UI:
The Account > Audit menu or tab is not displayed.		 Current UI:
The Account > Audit menu or tab is displayed. Users can view account-level audit information.		 Current UI:
Same as for View permission.
Manage Current UI:
The Account > Manage menu or tab is not displayed.		 Current UI:
The Account > Manage menu or tab is displayed.
Patch Management: Refer to Account-level permissions.
Software Management: Refer to Account-level permissions.
(Deprecated) iOS App Management: Users can view iOS App Management policies.

IMPORTANT  The Mobile Device Management (MDM) feature is no longer available. For more information, refer to this Community post.

Backup Management: Users can view Datto backup appliance data but they cannot add devices.
Security Management: Users can view existing Security Management policies.

 Current UI:
The Account > Manage menu or tab is displayed.
Patch Management: Refer to Account-level permissions.
Software Management: Refer to Account-level permissions.
(Deprecated) iOS App Management: Users can view and create iOS App Management policies.

IMPORTANT  The Mobile Device Management (MDM) feature is no longer available. For more information, refer to this Community post.

Backup Management: Users can view and map Datto backup appliance data.
Security Management: Users can view and create Security Management policies.
Monitor Current UI:
The Account > Monitor menu or tab is not displayed.		 Current UI:
The Account > Monitor menu or tab is displayed. Users can view monitor alerts and job alerts that have been raised across sites they have access to.
Users can run jobs if they have Manage permission for Jobs > Active Jobs as well.
Job alerts cannot be resolved.
Only users with Administrator security level can see suspended devices.		 Current UI:
Same as for View permission but users can also resolve and disable all alerts.
Support Current UI:
The Account > Support menu or tab is not displayed.		 Current UI:
The Account > Support menu or tab is displayed. Users can see support tickets raised from the sites they have access to.		 Current UI:
Same as for View permission.
Policies Current UI:
The Account > Policies menu or tab is not displayed.		 Current UI:
The Account > Policies menu or tab is displayed. Users can see what policies have been set in the sites they have access to but they cannot create new ones. Users can see which of their permitted devices are targeted but they cannot toggle policies.
Regarding Patch Management policies, refer to Account-level permissions.
Regarding Software Management policies, refer to Account-level permissions.		 Current UI:
Same as for View permission but users can also edit individual targets and configure new policies and Patch Management policy overrides.
Regarding Patch Management policies, refer to Account-level permissions.
Regarding Software Management policies, refer to Account-level permissions.
New UI:
The Policies menu is not displayed. However, users with at least View permission for Sites > Policies can see the Policies menu and a list of global policies along with a list of site policies, but they cannot create new global policies or edit, delete, or copy existing ones.
In the Device Summary > Policies card, users cannot click the name of a global policy.		 New UI:
The Policies menu is displayed. Users can see the details of global policies if they also have at least View permission for Sites > Policies. (Site and device visibility restrictions are respected.) However, users cannot create new global policies or edit, delete, or copy existing ones.
In the Device Summary > Policies card, users can click the name of a global policy if they also have at least View permission for Sites > Policies.
Users can view Managed applications on the Device Summary page. Refer to Applications.		 New UI:
Same as for View permission but users can also create, edit, delete, or copy global policies.
Users can enable or disable policies from the Policies card on the Device Summary page if they also have at least View permission for Sites > Policies.
The Best Practices button is displayed on the Policies page if users have Manage permission for ComStore > ComStore as well.
Filters Current UI and New UI:
Users cannot view or create custom filters at the account/global level; however, they can access Default Device Filters.		 Current UI and New UI:
Same as for None permission but users can view filters created at the account/global level from all users.		 Current UI and New UI:
Same as for View permission but users can create, edit, and delete their own filters at the account/global level.
Groups Current UI and New UI:
Users cannot view or create groups at the account/global level.		 Current UI and New UI:
Users can view groups created at the account/global level from all users.
 Current UI and New UI:
Users can view, edit, and delete groups created at the account/global level from all users.
  None View Manage
Sites Current UI:
The Sites tab is displayed, but users cannot access the list of sites when clicking the tab.

NOTE  It is recommended to exclude sites individually instead of limiting access to the Sites tab.

 Current UI:
Users can view the list of all sites they have access to. Users cannot create, edit, or delete sites, although they may have group and filter access.		 Current UI:
Same as for View permission but users can also create, edit, or delete sites. Groups cannot be created (this requires the Groups permission below). Quick jobs can also be run if components are available.
New UI:
The Sites menu is displayed but users cannot access the list of sites.		 New UI:
Users can view the list of all sites they have access to, but they cannot create, edit, or delete sites although they may have group and filter access.
Users can add a new device to the sites they have access to.
Users can create a ticket in Autotask PSA if they also have at least View permission for Sites > Devices and Manage permission for Sites > Support. Refer to Creating a ticket - New UI.		 New UI:
Same as for View permission but users can also create, edit, or delete sites. Users can edit site settings as well if they also have Manage permission for Sites > Settings.
Summary Current UI:
Users cannot view a site's Summary page; however, the rest of the tools/actions (for example, Audit, Manage, etc.) can be accessed. Refer to Site lists.		 Current UI:
Users can view a site's Summary page.
Although the Notes section appears, no notes can be logged.
Users can only see the Patch Status pie chart if they also have at least View permission for Sites > Manage.		 Current UI:
Same as for View permission but users can also save notes.
Devices Current UI:
A site's Devices menu or tab is not displayed, and individual device pages cannot be accessed.		 Current UI:
A site's Devices menu or tab can be accessed, but the only actions that appear are Export to CSV and Refresh.
On individual device pages, users can view device information but they cannot edit it.		 Current UI:
Same as for View permission but, depending on the user's security level permissions for other areas, expanded actions to move or edit devices and perform operations on them are shown on both the Devices tab and individual device pages.
On individual device pages, users can edit device information if they have Manage permission for Sites > Summary as well.
Users can also delete devices if they have Manage permission for Sites > Deleted Devices as well.
Users can enable Privacy Mode for devices.
New UI:
The Devices menu is not displayed.
Users with at least View permission for Sites > Sites can see the Devices menu and they can add a new device to any site they have access to; however, they cannot access any device.		 New UI:
The Devices menu is displayed, but users can only view devices if they also have at least View permission for Sites > Sites.
Users can only see device information but they cannot edit it, perform actions on a device, or delete a device.
Users can create a ticket in Autotask PSA if they also have at least View permission for Sites > Sites and Manage permission for Sites > Support. Refer to Creating a ticket - New UI.
Users can also approve application updates. Refer to Applications.
Users can also view and search for device-related activity in the Activity Log. Refer to Activity Log. 		New UI:
Same as for View permission but users can also edit device information, perform actions on a device, or delete a device from any site they have access to if they also have at least View permission for Sites > Sites. The users' ability to perform device actions depends on their security level permissions for other areas of the web interface. Refer to the Security and navigation section in Device Summary - New UI.
Audit Current UI:
The Audit menu or tab is not displayed at either the site or the device level.		 Current UI:
The Audit tab is displayed at the site and device level. Users can view audit information.		 Current UI:
Same as for View permission but users can also manage, move, and delete discovered devices, and request device audits.
New UI:
The Request Audit action button is not displayed on the Device Summary page and displayed but unavailable on device list pages.		 New UI:
Same as for None permission.		 New UI:
Users can see the Request Audit action button on the Device Summary page and it is available on device list pages as well if they also have at least View permission for Sites > Sites and Sites > Devices. Users can request full and delta audits.
Manage Current UI:
The Manage menu or tab is not displayed at the site level. The Manage menu or tab is displayed at the device level but it cannot be accessed.		 Current UI:
The Manage menu or tab is displayed and can be accessed at the site and device level.
Patch Management: Refer to Site-level permissions and Device-level permissions.
Software Management: Refer to Site- and device-level permissions.
(Deprecated) iOS App Management: Users can view iOS App Management policies.

IMPORTANT  The Mobile Device Management (MDM) feature is no longer available. For more information, refer to this Community post.

Backup Management: Users can view Datto backup appliance data but they cannot add devices.
Security Management: Users can view existing Security Management policies.

 Current UI:
The Manage menu or tab is displayed and can be accessed at the site and device level.
Patch Management: Refer to Site-level permissions and Device-level permissions.
Software Management: Refer to Site- and device-level permissions.
(Deprecated) iOS App Management: Users can view and create iOS App Management policies.

IMPORTANT  The Mobile Device Management (MDM) feature is no longer available. For more information, refer to this Community post.

Backup Management: Users can view and map Datto backup appliance data.
Security Management: Users can view and create Security Management policies.
Monitor Current UI:
The Monitor menu or tab is not displayed at the site level.
The Monitor menu or tab is displayed at the device level but the list of alerts cannot be accessed.		 Current UI:
The Monitor menu or tab is displayed and can be accessed at the site and device level. Users can view monitor alerts.
Users can run jobs if they also have Manage permission for Jobs > Active Jobs.
Users cannot create device-level monitors.		 Current UI:
Same as for View permission but users can also resolve and disable monitor alerts. Users can also create device-level monitors.
    New UI:
Users can create and end maintenance mode windows.
Users can create, enable, disable, and delete monitors in the Monitors card on the Device Summary page if they also have at least View permission for Sites > Sites.
Support Current UI:
The Support menu or tab is not displayed at the site level.
The Support menu or tab is displayed at the device level but it cannot be accessed.		 Current UI:
The Support menu or tab is displayed at the site and device level. Users can view support tickets.		 Current UI:
Same as for View permission but users can also create and edit support tickets.

 

 

New UI:
Users can create a ticket in Autotask PSA if they also have at least View permission for Sites > Sites and Sites > Devices. Refer to Creating a ticket - New UI.
Filters Current UI and New UI:
Users cannot view or create site-level filters.		 Current UI and New UI:
Users can view filters created at the site level from all users.		 Current UI and New UI:
Same as for View permission but users can create, edit, and delete their own filters at the site level.
Groups Current UI and New UI:
Users cannot view or create site-level groups.		 Current UI and New UI:
Users can use site-level groups that have already been defined, but they cannot add devices to the group and change group names.		 Current UI and New UI:
Users can view, edit, or delete groups created at the site level.
Policies Current UI:
The Policies menu or tab is not displayed at either the site or the device level.		 Current UI:
The Policies menu or tab is displayed at the site and device level. Users can view site-level policies.
Regarding Patch Management policies, refer to Site-level permissions and Device-level permissions.
Regarding Software Management policies, refer to Site- and device-level permissions.		 Current UI:
Same as for View permission but users can also create and edit policies. Filters and groups can be applied depending on the user's security level permissions for filters and groups.
Regarding Patch Management policies, refer to Site-level permissions and Device-level permissions.
Regarding Software Management policies, refer to Site- and device-level permissions.
New UI:
The Policies menu and the Policies card on the Device Summary page are not displayed.
Users cannot create new site policies. Users with at least View permission for Account > Policies can see the Policies menu; however, they cannot access the list of policies.		 New UI:
The Policies menu and the Policies card on the Device Summary page are displayed.
Users can view details of site policies with Account > Policies permission set to None, but they cannot click on global policies. Users can click on and view details of global policies as well if they also have at least View permission for Account > Policies.
Users can enable or disable policies from the Policies card on the Device Summary page if they also have Manage permission for Account > Policies. Users cannot create new site policies or edit, delete, or copy existing ones.
Users can view Managed applications on the Device Summary page. Refer to Applications.		 New UI:
Same as for View permission but users can also create, edit, delete, or copy site policies.
The Best Practices button is displayed on the Policies page if users have Manage permission for ComStore > ComStore.
Settings Current UI:
A site's Settings menu or tab is not displayed.		 Current UI:
A site's Settings menu or tab is displayed. Users can view the settings of individual sites but they cannot configure them.		 Current UI:
Same as for View permission but users can configure the settings of individual sites.
New UI:
Users cannot view site settings.
The Setup > Credentials menu is displayed; however, users cannot view or create site-level credentials.		 New UI:
Users can view site settings if they also have Manage permission for Sites > Sites; however, they cannot edit or delete these settings.
On the Setup > Credentials page, users can view site-level credentials for the sites they have access to if they also have at least View permission for Sites > Sites; however, they cannot create, edit, or delete site-level credentials.		 New UI:
Users can view, edit, and delete site settings if they also have Manage permission for Sites > Sites.
On the Setup > Credentials page, users can view, create, edit, and delete site-level credentials for the sites they have access to if they also have Manage permission for Sites > Sites.
Deleted Devices Current UI and New UI:
Users cannot delete devices even if they have Manage permission for Sites > Devices.

NOTE  The Sites > Manage Deletions option is only displayed for users with Administrator security level.

 Current UI and New UI:
Same as for None permission.		 Current UI and New UI:
Users can delete devices if they have Manage permission for Sites > Devices as well.

NOTE  The Sites > Manage Deletions option is only displayed for users with Administrator security level.
  None View Manage
Components Current UI:
The Components tab is displayed, but users cannot view the list of their components or select any components as part of jobs.		 Current UI:
The Components tab is displayed. Users can see and choose components as part of jobs but they cannot export, edit, copy, or delete them. Users can view component scripts (and download files), but they cannot edit the scripts. Users can mark components as favorites. Users cannot change the component level of components on the Component List page.
Users can run jobs if they have Manage permission for Jobs > Active Jobs as well.		 Current UI:
Same as for View permission but users can also export, edit, copy, and delete components. Users can also change the component level of components on the Component List page.
New UI:
The Component Library is not displayed, and the list of components cannot be accessed.		 New UI:
The Component Library is displayed. Users can view components in the list, view individual component details including component scripts, search for components, and view component groups. Users can create jobs with selected components if they also have Manage permission for Jobs > Active Jobs.		 New UI:
Same as for View permission but users can also create, edit, and delete components, add components to and remove components from groups, create new component groups, set components as User Tasks, and update, copy, import, and export components.
User Tasks Current UI:
Users cannot see if a component in the Component Library has been marked as a User Task.		 Current UI:
Same as for None permission.

 Current UI:
Users can see if a component in the Component Library has been marked as a User Task, and they can click the Toggle User Task icon to enable or disable a component as a User Task.
New UI:
Users can see if a component in the Component Library has been set as a User Task.		 New UI:
Same as for None permission.		 New UI:
Same as for None and View permission but users can also set or unset components as a User Task if they also have Manage permission for Components > Components.
  None View Manage
ComStore Current UI:
The ComStore tab is displayed, but the list of components cannot be accessed.		 Current UI:
The ComStore tab is displayed. Users can browse the ComStore and search for components, but they cannot add the components on display to the Component Library.		 Current UI:
Same as for View permission but users can also add components to the Component Library.
New UI:
The Automation > ComStore menu is not displayed, and the list of components in the ComStore cannot be accessed.
Users cannot add components from the ComStore to jobs.		 New UI:
The Automation > ComStore menu is displayed. Users can browse the ComStore and search for components, but they cannot add the components on display to the Component Library.
Users cannot add components from the ComStore to jobs.		 New UI:
Same as for View permission but users can also add components from the ComStore to the Component Library and to jobs.
The Best Practices button is displayed on the Policies page, and users can add and configure ComStore policies if they also have Manage permission for Account > Policies (for global policies) and Sites > Policies (for site policies).
  None View Manage
Active Jobs Current UI:
The Jobs tab is displayed, but jobs and quick jobs cannot be accessed, scheduled, or run.		 Current UI:
The Jobs tab is displayed, but the New Job option is not available. Users can access Active Jobs and Completed Jobs, but they cannot schedule, run, edit, retire, or delete jobs and quick jobs.		 Current UI:
Same as for View permission but the New Job option is also available. Users can schedule, run, edit, retire, and delete jobs and quick jobs.
New UI:
The Automation > Jobs menu is not displayed, and jobs and quick jobs cannot be accessed, scheduled, or run.		 New UI:
The Automation > Jobs menu is displayed. Users can view jobs, but they cannot schedule, run, edit, retire, or delete jobs and quick jobs.		 New UI:
Same as for View permission but users can also schedule, run, edit, retire, and delete jobs and quick jobs.
Users can add components from the ComStore to jobs if they also have Manage permission for ComStore > Comstore.
  None View Manage
Active Reports Current UI:
The Reports tab is displayed, but reports and exports cannot be accessed, scheduled, or run.		 Current UI:
The Reports tab is displayed, but the New Report option is not available.
Users can access Active Reports and Completed Reports, but they cannot schedule, run, edit, or delete reports and exports.		 Current UI:
Same as for View permission but the New Report option is also available. Users can schedule, run, edit, and delete reports and exports.
New UI:
The Analytics > Reports menu is displayed; however, upon clicking, users are directed to the Reports tab in the current UI where the current UI permissions are applied.
  None View Manage
Billing Current UI:
Billing is not displayed in the Setup tab.
A banner is displayed if the license limit has been exceeded.		 Current UI:
Billing is not displayed in the Setup tab unless the Datto RMM account is expired or suspended.
A banner is displayed if the license limit has been exceeded.		 Current UI:
Same as for View permission but users can request subscription increase.
New UI:
The Setup > Licenses menu is not displayed.
A banner is not displayed if the license limit has been exceeded.		 New UI:
The Setup > Licenses menu is displayed.
Users can view their license count and usage, but they cannot add licenses or enable Ransomware Detection.
A banner is not displayed if the license limit has been exceeded.		 New UI:
Same as for View permission but users can also add licenses and enable Ransomware Detection.
A banner is displayed if the license limit has been exceeded.
My Info Current UI:
My Info is displayed in the Setup tab, but it cannot be accessed.		 Current UI:
My Info is displayed in the Setup tab and can be accessed.
In the My Info section, users can configure their language and default security level. These changes do not apply to other users within the account.
In the Security Settings section, users can click Datto Portal User Settings. This directs them to the Datto Portal where they can update their user settings.		 Current UI:
Same as for View permission.
Messages Current UI:
Messages is not displayed in the Setup tab. The Send a message to the selected devices action bar icon is not displayed on device list pages, the Device Summary page, and the Device Audit page.		 Current UI:
Same as for None permission.		 Current UI:
Messages is displayed in the Setup tab. Users can view and delete previously sent messages to devices they have access to if they also have at least View permission for Sites > Devices.
The Send a message to the selected devices action bar icon is displayed on device list pages, the Device Summary page, and the Device Audit page.
New UI:
The Send Message action button is not displayed on the Device Summary page and displayed but unavailable on device list pages.		 New UI:
Same as for None permission.		 New UI:
Users can see the Send Message action button on the Device Summary page and it is available on device list pages as well if they also have at least View permission for Sites > Sites and Sites > Devices.
Account Settings /
Global Settings		 Current UI:
Account Settings is not displayed in the Setup tab.		 Current UI:
Account Settings is displayed in the Setup tab and can be accessed, but users cannot configure the settings.		 Current UI:
Account Settings can be accessed, and users can configure all settings.
New UI:
The Setup > Global Settings menu is not displayed.
The Setup > Credentials menu is displayed, but users cannot view or create global credentials.		 New UI:
The Setup > Global Settings menu is displayed. Users can view global settings, but they cannot configure the settings.
The Setup > Credentials menu is displayed, and users can view global credentials, but they cannot create, edit, or delete global credentials.		 New UI:
Same as for View permission but users can also configure all settings on the Global Settings page and view, create, edit, and delete global credentials on the Credentials page.
Integrations Current UI:
Integrations is not displayed in the Setup tab.		 Current UI:
Integrations is displayed in the Setup tab, but the integrations cannot be accessed.		 Current UI:
Same as for View permission but users can access and configure the integrations.
New UI:
The Setup > Integrations menu is not displayed.		 New UI:
Same as for None permission.		 New UI:
The Setup > Integrations menu is displayed. Users can access and configure the integrations.

This section controls access to tools available in the Agent Browser or in Web Remote sessions. When creating a new security level, all tools listed in the table below are enabled by default. The table specifies which tools are available in the Agent Browser and in Web Remote. Disabling any of the tools will inactivate that tool for the user who is a member of the security level.

NOTE  Changes made in this section will only come into effect once the Agent Monitor application on the remote device has been exited and restarted.

Detailed information about how to access the tools can be found in the Agent Browser tools or Web Remote topics. To learn more about each tool and which device types they are available for, click the referenced sections in the table below.

Field Description Agent Browser Web Remote
Toggle all options Enabled by default for new accounts. Toggle to turn OFF/ON all options listed below.    
Screenshot Refer to Screenshot.  
Services Refer to Windows Services.  
Screen Share Allows you to use Splashtop and VNC in the Agent Browser. Refer to Splashtop and VNC.  
RDP Refer to RDP.  
Command Shell Refer to Command Shell.  
Restart/Shutdown Refer to Restart and Shut Down.  
Thumbnail Screen Refer to Thumbnail Screen.  
Chat Refer to Chat.  
Drive Information Refer to Drive Information.  
SSH/Telnet Refer to Connect (Telnet/SSH).  
PowerShell Refer to PowerShell.  
LAN Deploy Refer to Agent Deployment.  
Task Manager Refer to Task Manager.  
File Manager For the Datto RMM Agent, refer to File Management. For Web Remote, refer to File Transfer.
Registry Editor Refer to Registry Editor.  
Quick Jobs Refer to Quick Jobs.  
Event Viewer Refer to Event Viewer.  
Notes Refer to Notes.  
Wake-on-Lan Refer to Wake Up.  
HTTP Refer to Connect (HTTP).  
Custom Connection Refer to Connect (Custom Tunnel).  
Web Remote Refer to Web Remote.  

You can specify to which users you would like to assign this security level. Select your users and move them to the Include or Exclude column accordingly.

Use the Search field above either the Include or Exclude column to search for users. As you type, the search results are narrowed to match your search string.

If you want to exclude one or more users from an existing security level that is the users' default security level, a dialog box will be displayed where you can confirm the security level replacement. From the drop-down menu, select a new default security level for all affected users and click Change.

Alternatively, click Edit in the dialog box to replace the default security level for each user individually. Click the radio button next to the security level you want to set as the new default security level and then click Next to configure each affected user account.

When you create a new security level, we recommend that you assign it to yourself first to see if it restricts or allows everything you want it to. Testing a security level is important to ensure that users with that security level are able to access the tools or information they require to perform their daily tasks. It is also equally important to ensure that they don't have access to anything they shouldn't. To learn how you can change security levels to test them, refer to Switch security levels.

IMPORTANT  If you give third-party users (such as your customers) access to the account, ensure that the security level restrictions meet your internal data security requirements.

  1. In the Web Portal, click the Setup tab.
  2. Click Security Levels.
  3. Click the name of the security level you wish to edit.
  4. Edit the security level details. Refer to Configure the security level details.
  5. Click Apply and Save.
  1. In the Web Portal, click the Setup tab.
  2. Click Security Levels.
  3. Hover over the name of the security level you wish to delete and click Delete this security level.
  4. From the drop-down menu in the Confirm Security Level Deletion dialog box, select a new security level to replace the one you are about to delete.
  1. To proceed, click Delete. This will delete the security level and, additionally, the following actions will be performed:
    • Any existing jobs or policy targets currently linked to the security level you are deleting will be assigned to the replacement security level.
    • Any users that are currently a member of the security level you are deleting will be added as members to the replacement security level.

If you do not wish to proceed, click Cancel. To learn how to configure the security levels of the linked users individually, refer to Edit a security level or Edit a user.

If a user has more than one security level assigned, they can change their security level in the web interface or in the Agent Browser.

Current UI

  1. In the top-right corner of the Web Portal, click your current security level to see a list of available security levels.
  1. Select the required security level.
  2. The page will automatically refresh and the selected security level will be applied.

Switching your security level will only apply to your current session. Your default security level will be used the next time you log in to your account.

New UI

Refer to Current Security Level in My Settings.

Agent Browser

  1. On the local device where Datto RMM is installed, right-click the Datto RMM Agent icon in the system tray and click Open.
  2. Log in with your credentials.
  3. Click the first menu option in the top left corner of the Agent Browser.
  4. Hover over Security Level and select the required security level from the list.
  1. You will be logged out of the Agent automatically.
  2. Log back in to be able to use the selected security level.