Segmenting Client Sessions

[immense]

Segmenting Client Sessions

[bitbound]

Thanks for the comments.

The categorization of endpoints is pretty basic and roughly thrown together. Just to keep terminology straight, the top-level "container" in Remotely is called an Organization. That really should be changed to Provider (as in IT service provider). It separates the accounts in a multi-tenant setup, such as the demo server.

Most people running their own server for their own use will only have one organization.

All users and device endpoints go into that organization. You can label/categorize the devices with tags.

Permission groups can be used to restrict access to devices. Any device that has a permission group applied can only be accessed by users in the same group, or by admins. The groups are set up in the Account - Organization section. Then you use AddGroup/RemoveGroup in the console to manage the devices.

It's pretty awkward. I was going to do another pass at group management, but I ended up running out of time/motivation. I'm really busy lately with my real job and family/kids.

So, maybe some day I'll revisit it. And no, it hasn't been pentested or anything.