Team Settings¶

These are global workspace settings that apply to all members of your team. The settings are grouped by system entities: devices, connections, and techniques. In this guide, you can learn more about each setting and what functions they provide.

The settings are located in the Settings section on the Team tab and are divided into several logical groups: Devices, Connections and Technicians.

Devices¶

The following settings apply to all devices linked to your account under Permanent Access.

Privacy¶

When a device is added to Permanent Access, team-based group settings are applied to it automatically (because the system is designed for team collaboration). This means that technicians in your team who have access to certain groups—such as the All group—will automatically gain access to the new device.

If you do not want new devices to automatically inherit group access settings, you can disable this behavior using the Do not apply group access settings to new devices option.

---

Desktop Preview¶

To make it easier to identify devices in the Permanent Access list when using the tile view, small desktop preview images are displayed. The device periodically captures a screenshot of its desktop and sends it to the server.

If this is unnecessary or not acceptable for any reason, you can disable the capture and transmission of desktop previews. Once disabled, a default operating system wallpaper will be shown instead of the preview image.

---

Software Inventory Access¶

To support the software inventory feature on devices under Permanent Access, the agent application sends and periodically synchronizes a list of installed programs with the server.

If you do not use this feature, you can prevent the agent from sending this data by unchecking Allow receiving a list of software from devices. After disabling it, the software list will no longer be displayed and will require permission to be enabled again.

---

Automatic Removal of Inactive Devices¶

You can enable automatic removal of devices from Permanent Access if they remain offline for an extended period. To do this, enable Automatically remove devices if they are offline and specify the number of days after which the device will be removed.

Connections¶

The following settings apply to all connections made under your account, including those initiated by your team’s technicians.

Image Quality Settings¶

You can manage the video encoding settings used by the agent application on the remote device during a connection session. These settings determine how the image is transmitted to the technician’s connection window.

The specified values will be used by the agent application as default settings. They can be overridden in the agent application's own settings.

---

Automatic Video Recording¶

You can enable forced automatic video recording for all your connections, including those of your technicians. This recording cannot be disabled during an active session. To enable it, check Automatically launch video recording when connections are started.

---

Capture Indicator¶

You can enable an indicator of an active connection on the remote device so that the remote user knows the device is currently being controlled.

To enable the indicator, check Show the screen capture indicator on the remote device when connected.

When this option is enabled, a red border will appear around the remote desktop:

---

Maximum Duration¶

You can enforce a limit on the maximum duration of a connection session. This may be necessary to regulate your team technicians’ workflow.

To set this limit, check Maximum connection duration and specify the maximum duration in seconds.

---

Automatic Termination¶

You can enable automatic termination of a connection session when there is no activity from the technician. This helps prevent unnecessary resource consumption caused by accidentally forgotten open connection tabs.

To enable this, check Timeout to automatically terminate the connection when idle and specify the idle time in seconds.

---

One-Time Link Expiration¶

You can control the expiration time of one-time connection links generated by the agent application, within a range from 20 seconds to 1 minute.

To use this option, check Set a custom timeout for quick links and specify the desired expiration time in seconds.

---

Invitation Expiration¶

You can limit the validity period of Quick Support invitations, setting it from 1 hour up to 3 days.

To configure this, check Timeout for quick support invitations and specify the duration in hours.

Technicians¶

The following settings apply to all subordinate technician accounts in your team. These settings do not apply to the main owner account.

Security¶

Settings for secure system usage.

IP Allowlist¶

You can restrict access to the personal account by specifying which IP addresses are allowed to log in.

To do this, list specific IP addresses or IP ranges, one per line.

If a technician attempts to log in from an IP address that is not on the list, access to the personal account will be denied. Already logged-in technicians will also be logged out if their IP address is not in the allowed list. The restriction applies only when the IP list is not empty.

---

Forced Two-Factor Authentication¶

You can require all technicians to enable two-factor authentication.

To enable this, check Forced two-factor authentication.

When this option is active, technicians who do not have two-factor authentication enabled will see a message during login and will not be allowed into their personal account until they set it up.

Recovery Code¶

You can disable issuing a recovery code to prevent it from being lost or misused by an attacker.

To do this, check Do not offer technicians to download the 2FA recovery key.

When enabled, the recovery code step will be skipped during 2FA setup.

Password Expiration¶

You can limit the validity period of technician passwords to enforce periodic password changes.

To enable this, check Password expiration dates and specify the validity period in days.

When this option is active, technicians with expired passwords will be automatically redirected to the password change page when attempting to access any page.

---

Automatic Logout on Inactivity¶

You can automatically log out technician accounts after a period of inactivity.

To enable this, check Automatic logout from personal account when inactive and specify the inactivity timeout in minutes.

Single Sign-On (SSO) Integration¶

Single Sign-On technology allows you to connect your authentication server for technician authorization.

Session Lifetime¶

You can limit the lifetime of the authorization token, from 1 hour to 1 year.

To apply this, check SSO session timeout and specify the duration in hours.

Active Directory (LDAP) Integration¶

If your operators’ and administrators’ accounts are already configured in a local Active Directory, you can import them into the user accounts of our system. They will be able to log in using the same usernames and passwords.

Automatic Synchronization¶

You can manage global Active Directory integration settings.

Frequency¶

The interval at which automatic synchronization of technicians from Active Directory will run, if the integration is enabled. The minimum value is 5 minutes, the maximum is 7 days.

---

Timeout¶

The period after which department technicians will be disabled if their department synchronization fails. The minimum value is equal to the synchronization frequency, and the maximum is 30 days. By default, this value is ten times the synchronization frequency.