Files
UNITRONIX d671c86859 feat: user scope UX, role labels, and device visibility defaults (#227)
Add folder/direct-device/strategy assignment from User Management, clearer Pro vs Remote Operator labeling, optional restricted device scope mode, and Go/Node scope parity.
2026-07-05 19:44:18 +02:00

2.1 KiB
Raw Permalink Blame History

Reply for GitHub discussion #227 (copy/paste)


Hi — thanks for raising this, it helped us spot a naming mix-up that trips people up often.

Short version: In BetterDesk, the panel role called Pro is not what most people mean by a “Pro end user”. Its a special license/API-only account (RustDesk desktop client, no web panel). If you want someone who can log into the console, change their password, use the Web Client, and only see their machines — thats a Remote Operator, not pro.

What already works today

For a typical “remote user with limited visibility”:

  1. Create the user as Remote Operator (was just labeled “Operator” in the UI).
  2. Password: they can change it themselves under Settings → Change password (local accounts).
  3. Web Client: Remote Operators can use Remote Desktop in the panel (device.connect). Viewers are read-only and cannot connect.
  4. Limit which devices they see:
    • Put devices in folders and set folder access (allowed users / user groups), or
    • Use user groups + device group ACL (same idea as before).

What were shipping to make this easier

On the next update (via Settings → Updates):

  • User Management: assign folders, direct devices, and an optional RustDesk Pro strategy per user — all in one place.
  • Clearer role names in the UI: Remote Operator vs Pro License (client API only).
  • Optional restricted default visibility in Settings (for servers that want “see nothing until explicitly granted” instead of “see everything until ACL is set”).

Docs for operators: Scoped remote user recipe

When to use the pro role

Keep pro for accounts that only need to activate RustDesk Pro through the desktop client API — not for normal staff who should use the web console.


If you try the Remote Operator + folder/user-group setup and something still feels off, tell us your exact goal (how many users, LDAP or local, need Web Client or desktop only?) and well refine from there.