mirror of https://github.com/UNITRONIX/BetterDesk.git synced 2026-09-10 17:45:42 +00:00

Files

T

UNITRONIX d671c86859 feat: user scope UX, role labels, and device visibility defaults (#227 )

Add folder/direct-device/strategy assignment from User Management, clearer Pro vs Remote Operator labeling, optional restricted device scope mode, and Go/Node scope parity.

2026-07-05 19:44:18 +02:00

1.7 KiB

Raw Permalink Blame History

Scoped remote user recipe

Guide for operators who need limited device visibility, Web Client access, and self-service password change — without using the pro panel role.

Terminology

BetterDesk role	Use for
Remote Operator (`operator`)	End users who connect remotely, use Web Client, change own password
Viewer (`viewer`)	Read-only monitoring (no Web Client)
Pro License (`pro`)	RustDesk desktop API / license activation only — no web panel

RustDesk Pro client features are controlled separately via strategy assignments, not the pro role.

Recipe: scoped remote user

Create a user group (Users → User groups) e.g. Team-A.
Create folders (Devices → Folders) and assign devices via drag-and-drop or folder picker.
Restrict folder ACL: edit folder → allowed users and/or allowed user groups.
Create user with role Remote Operator.
Assign user groups, folders, and/or direct devices in the user form.
Optional: assign a RustDesk Pro strategy on the same form for Pro client features.

Default visibility modes

Mode	Behavior
Open (default)	Non-admins see all devices until folder/group ACL or direct grants exist
Restricted	Non-admins see only explicitly granted devices (Settings → Device visibility default)

Password and Web Client

Password: Remote Operator / Viewer → Settings → Change password (local accounts).
Web Client: requires Remote Operator (device.connect permission).

RBAC Phase 52
GitHub discussion #227

1.7 KiB Raw Permalink Blame History