SECURITY Refer to Setup > Global Settings in Permissions.
NAVIGATION Setup > Global Settings
IMPORTANT The settings described in this topic apply to your entire Datto RMM account.
This section allows you to control access to your Datto RMM account. Turn the options on or off as required or edit the Restricted IP List. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.
|Enable API Access||Enables access to the Datto RMM API. By default, API access is disabled. Once it is enabled, API keys can be generated on a user-by-user basis. Refer to Edit a user in the legacy UI and Editing a user in the New UI.|
|New Device Approval||This option is disabled by default. When it is enabled, any new device added to the Datto RMM account will require Administrator approval before the device can participate in the account activity. Disabling this option will immediately authorize all new devices currently pending approval. For more information, refer to New device approval - Legacy UI in the legacy UI and New Devices in the New UI.|
|IP Address Restriction||Restricts access to the web interface to specific IP addresses. This option is disabled by default. Once this option is enabled, your current public IP address will automatically be added to the Restricted IP List. You can add more than one IP address to the list.|
|Agent IP Address Restriction||Restricts access to the Agent Browser to specific IP addresses. This option is disabled by default. Once this option is enabled, your current public IP address will automatically be added to the Restricted IP List. You can add more than one IP address to the list. Refer to Agent Browser.|
|Restricted IP List||When you enable the IP Address Restriction or Agent IP Address Restriction options, your current public IP address will automatically be added to the Restricted IP List. Click the plus or minus sign to update the list. One IPv4 Address may be entered on each line. Access to the web interface and the Agent Browser will be restricted to the IP addresses that appear in this list. An error message will be displayed if an invalid entry has been entered. Refer to Agent Browser.|
This section allows you to define how Agents communicate with the platform and perform network scans. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.
|Use alternative settings for Agent||Toggle to be able to configure the settings listed below.
This field is only displayed for Administrators and users with Manage permission for SETUP > Account Settings in the legacy UI. Refer to Security Level Details - Permissions.
|Control Channel Address||By default, this field should be left blank. In case a specific control channel address is needed for your account, contact your Datto RMM Implementation Manager.|
|Control Channel Port||By default, this field should be left blank. In case a specific control channel port is needed for your account, contact your Datto RMM Implementation Manager. The port can be configured between 1 and 65,534.|
|Web Service Address||By default, this field should be left blank. In case a specific web service address is needed for your account, contact your Datto RMM Implementation Manager.|
|Tunnel Server Address||A tunnel server acts as an interface between devices for remote takeover sessions. Specify an IP or domain and a port to be used for the relayed connection by default. The IP or domain should be separated from the port by a colon (for example: 188.8.131.529:443). For more information about the tunnel server grid, refer to Connecting Agents through the tunnel server grid.|
|Network Subnet Limit||Limits the size of the scan an Agent performs in a single subnet. By default, the limit is set to 65,534, which is also the maximum number of IP addresses that an Agent is able to scan in a subnet. To disable network scanning for the entire account, set the value to 0.
NOTE It is not possible to disable network scanning at the site level. For further information about network scanning, refer to Network discovery - Legacy UI in the legacy UI and Network Discovery in the New UI.
|Network Scan Limit||The limit of devices that an Agent can scan on the subnet of the device. By default it is set to 1,024. Minimum value: 0; maximum value: 2,048.
For further information about network discovery, refer to Network discovery - Legacy UI in the legacy UI and Network Discovery in the New UI.
This section allows you to specify a From Name and a Reply-To Address for email notifications sent by your Datto RMM account. These will be used in the From and To fields for response emails only. Configure the fields and click Save. To discard the changes, click Cancel.
NOTE The Email Settings section can be saved if both fields contain values, if both fields are empty, or if the Reply-To Address field contains a valid email address and the From Name field is empty.
The Email Settings section cannot be saved if the From Name field contains a value and the Reply-To Address field is empty.
Enter a name to be used in the From field of emails (for example: IT Support).
NOTE Avoid entering an email address in this field, as it can confuse the email service and prevent the notifications from sending successfully. Enter an email address in the next field instead.
|Reply-To Address||Enter an email address to which you want your recipients to reply.
NOTE The email field accepts the following characters:
This section allows you to specify one or more email recipients and define what type of email notifications they should receive.
NOTE The user who registered the account is added as an email recipient by default, and all notification types are selected for this user.
To delete an email recipient, click the delete icon at the end of the row. To add one, click Add Email Recipient. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.
|Name||Enter the recipient's name.|
|Address||Enter the recipient's email address.
NOTE The email field accepts the following characters:
|Type||Select the preferred email format for this recipient: Both, HTML, or Text.|
|Receives||Select any of the notification types this recipient should receive: Alerts, ComStore Components, New Devices, or Reports.
NOTE Selecting ComStore Components will opt you in to a Component Update Digest email notification. Refer to Check for updates.
You can specify variables that can be used when writing custom components. The variables can be defined with a specific value that the Agent will use when executing the script. How you refer to the variables in your script will be defined by the scripting language you apply (for example, in batch scripts, you can refer to a variable in the format of %VariableName%).
NOTE Global variables used in components will be passed to jobs and monitors but will be overridden by site variables of the same name. You can specify site variables on the Site Settings page. Refer to Variables. You can also update multiple sites' variables in bulk using a CSV template. Refer to the Import Site Variables section of Global Settings.
To delete a variable, click the delete icon at the end of the row. To add one, click Add Variable. Configure the fields and click Save. Click Confirm to execute the action or Cancel to close out of the dialog box. To discard the changes, click Cancel.
|Name||Enter a name. Make sure there is no space in the name of the variable. This field can be edited after saving the variable.
While site variables may share the same name as global variables, variable names must be unique at the site level and at the global level.
|Value||Enter a value. Variable value limit: 20,000 characters. This field can be edited after saving the variable.|
|Masked||Select the check box to hide the value of the variable. Once a variable has been saved, this field can no longer be edited.
IMPORTANT When extended logging is activated for log components, masked variables will be visible in clear text in the log file. Refer to Adding extended logging to Datto RMM.
Update one or more of your Managed sites' existing variables or add new variables by uploading a CSV file.
NOTE Sites with OnDemand devices cannot be updated with variables.
You can upload any file with the .csv extension saved on your device. You may opt to use the pre-populated CSV template that contains every site you have permission to view in your Datto RMM account. The template is useful for quickly adding a single variable or for adding multiple variables at once to any number of sites. Complete the following steps to download, edit, and upload the site variables CSV template:
- Click Download Template.
- Open the CSV file you downloaded, and add the following information:
|Site ID||The Site ID (site identifier) is hard-coded and cannot be changed or updated.|
|Site Name||The name of your site. The name cannot be updated through the CSV file; however, it can be changed in Site Settings - Legacy UI in the legacy UI and in Site Settings in the New UI.|
|Site Description||The description of your site. The description cannot be updated through the CSV file; however, it can be changed in Site Settings - Legacy UI in the legacy UI and in Site Settings in the New UI.|
|Variable Name||Enter the name of the variable. It can be a new variable or an already existing one.
NOTE This field is mandatory.
|Variable Value||Enter the value of the variable. It can be a new value or an already existing one.
Variable value limit: 20,000 characters.
NOTE This field is mandatory.
|Variable is Hidden||If you would like to mask the variable value, enter 1. If you would not like to mask the variable value, enter 0.
NOTE When adding a new variable and leaving this field blank, the variable value will not be masked.
NOTE The variable_name and variable_value values in the CSV file are both mandatory in order for a site variable to be successfully imported.
- Save the file in CSV format.
- Click Import, and select the file you have just saved.
- Click Upload, and you will see a message that the site variables uploaded successfully. Or, click Cancel to remove any selected file.
NOTE The Upload button is grayed out until a valid CSV file is imported.
This section allows you to rename the default label of 30 user-defined fields (UDFs). The UDFs can be populated with information that is not picked up in the device audit to provide additional targeting for jobs and policies. You can enter and edit UDF information manually on the Device Summary page, or it can be populated by the Datto RMM Agent. For further information, refer to User-defined fields.
To rename a default UDF label, update the Global Label field. The change will be saved automatically.
NOTE UDF labels have a limit of 22 characters.
NOTE UDFs have a limit of 255 characters.