For the complete documentation index, see llms.txt. This page is also available as Markdown.

System settings

The System settings section of the Administration panel is used to manage the global settings of all users and user groups in Devolutions Cloud.

General

In the General section of the System settings, manage settings related to temporary passwords, networking, support tickets, and opened sessions.

OPTION
DESCRIPTION

Send temporary password by email

Select how the temporary password is sent to users when creating their Devolutions Account from an invite in Devolutions Cloud:

  • Ask: When creating a new Devolutions Account, a prompt will appear asking to send a temporary password by email.

  • Send: When creating a new Devolutions Account, users will receive their temporary passwords by email.

  • Not send: When creating a new Devolutions Account, users will not receive their temporary password by email. At that time, a prompt will appear with their temporary password. This critical information can then be communicated to the users if need be.

Allow sending messages

Allow users to send messages with or without attachments, or to restrict them from sending messages.

Block Tor traffic

Blocks Internet traffic coming from the Tor network.

Allow users to submit a support ticket

Enables the option for users to submit a ticket to the customer support team.

Automatic "Mark as closed" after X days

Marks opened sessions as closed after a set number of days.

System message

Administrators can share general messages to communicate essential information and procedures to users. Users have the option to dismiss these messages or retain them as reminders that will be displayed each time they sign in.

System messages settings can also be managed for specific users in Administration – Users – Edit – Allow send messages.

Vault

In the vault section of the System settings, manage settings related to user vault and visibility.

OPTION
DESCRIPTION

Allow user vault

Allow User vault for users.

Public - Allow access request

Set vault visibility to public. Every user can see public vaults, but only those who have requested access can use them.

Private - Invitation only

Set vault visibility to private. Only users with an invitation can see and use them.

Force default status

Enforce a default visibility status for new vaults.

Force Checkout mode on entries

  • Checkout mode: Control how the checkout mode is enforced when users access entries in the vault.

  • Checkout prompt: Define whether users are prompted before checking out an entry.

Note that vault visibility can also be changed for each vault individually. See Vault access in Devolutions Cloud for more info.

RDM & Workspace clients

The RDM & Workspace clients settings allow administrators to configure various aspects of how Remote Desktop Manager and its companion tools interact with Devolutions Cloud workspaces.

OPTION
DESCRIPTION

Cache/Offline

Set the length of time offline data is stored before it expires.

Force application password on RDM

Require a password for accessing Remote Desktop Manager.

Allow syncing all vaults (background)

Remote Desktop Manager will periodically synchronize all accessible vaults without requiring manual action.

Portable license

Allow Remote Desktop Manager users to use their Remote Desktop Manager licenses across workspaces.

Enforce biometric lock or master password

Require the use of biometrics or master password when connecting to the workspace.

Resolve variables in linked host

Variables are resolved in the linked host field of entries, allowing dynamic values to be used instead of static text.

Version management

Set minimal and maximal Remote Desktop Manager version requirements per platform (Windows, macOS, Linux), with optional custom messages.

Force auto lock after a delay of

When activated, the Devolutions Cloud workspace in Devolutions Password Manager will lock itself after a specified delay (e.g., 30 seconds) of inactivity.

Force background lock

Activating this feature provides an additional layer of security by preventing unauthorized access to the Devolutions Cloud workspace in Devolutions Password Manager if a user switches to another task or window.

Force clear clipboard after copy with a delay of

Enforce clear clipboard lets administrators require Remote Desktop Manager and Workspace clients to automatically clear clipboard data after a set delay.

Session recording

Allow administrators to view and download all recordings for supported sessions with Devolutions Gateway.

The Devolutions Cloud Services is required to enable session recording.

OPTION
DESCRIPTION

Enable Devolutions Gateway recording

Enable Devolutions Gateway recording in entries.

Enable Devolutions Gateway recording automatic cleanup

Automatically deletes session recordings older than a specified duration (in days, weeks, months, or years).

Users

Allow users to work in offline mode by default. Disabling this option increases security by requiring users to stay connected to the Devolutions Cloud.

OPTION
DESCRIPTION

Allow offline by default for users

Determines whether users are allowed to use offline mode by default.

Tag colors

In the Tag colors section of the System settings, create rules that set the colors of custom user tags. Tags without a rule are displayed in the default Devolutions blue. Click Add tag color rule to create a rule.

OPTION
DESCRIPTION

Tag name

Name of the custom tag the rule applies to.

Match mode

Select how the tag name is compared to the tags assigned to users:

  • Exact match: the tag must match the name exactly.

  • Starts with: the tag must start with the name.

  • Ends with: the tag must end with the name.

  • Contains: the tag must contain the name.

  • Regex: the tag must match the name used as a regular expression.

Case sensitive

Make the match case sensitive.

Background color

Background color of the tag in the light theme.

Text color

Text color of the tag in the light theme.

Background color (dark)

Background color of the tag in the dark theme.

Text color (dark)

Text color of the tag in the dark theme.

Preview

Shows how the tag will look with the selected colors.

Advanced

In the Advanced section of the System settings, manage settings related to Devolutions Password Manager browser extension autofill and external sharing.

OPTION
DESCRIPTION

Allow Devolutions Password Manager browser extension autofill

Allow Devolutions Password Manager browser extension to autofill credentials.

Allow users to send messages and passwords securely via Devolutions Send

Users can send encrypted messages and passwords using Devolutions Send.

Require passphrase for Devolutions Send

A passphrase is required before users can send a message using Devolutions Send.

Password management

The Password management section of the System settings lets administrators enable and configure forbidden password validation for the Devolutions Cloud workspace.

OPTION
DESCRIPTION

Forbidden password check

A verification of the password against all configured forbidden password rules is done if enabled. If disabled, no forbidden password validation is applied. Validation is enforced in the web client, as well as in Remote Desktop Manager and Devolutions Password Manager when connected to this workspace.

Forbidden password

Forbidden passwords let administrators build a list of rules that block specific passwords from being used in the Devolutions Cloud workspace. Each rule has its own name and verification mode, and rules can be added, edited, or removed independently.

Use the Have I Been Pwned integration to check whether a password already appears in known lists of passwords leaked in data breaches, then add it to the forbidden password list if needed.

Setting

Description

Name

Give the rule a name to identify it in the list.

Case sensitive

Make the rule's verification mode case sensitive.

Verification mode

Select the verification mode for the rule between: Contains: the password will be forbidden if it contains the rule's forbidden password. Exact match: the password will be forbidden if it matches the rule's forbidden password.

Import

Import a list of passwords from your computer, one password per line. Imports are limited to 1 MB and 1,000 passwords per rule. Passwords that don't match the accepted format are skipped and reported in a warning listing the non-conforming entries, which can be copied to the clipboard; the warning also links to the Entry security analyzer report, pre-filtered to the affected entries.

Export

Export the forbidden password list as a JSON file.

See also

Last updated

Was this helpful?