Help › Set up › B6

Keep customers cleanly apart and appear under your own brand

For IT service providers — one access per customer, accounts only for the right customers, control only from the device's own access, and your name, logo and support contact in the program.

Preview this guide has not yet been clicked through on a real device. Button names and steps come from the program but may differ in details.

For
IT service provider (MSP)
Applies to
Cloud · Own relay
Right in the console
System administrator (create accesses, assign accounts); administrator of the access (policy, branding)
Controlled device
Windows · macOS · Linux
Control from
Browser
from version
20261010.39

What it is for

If you look after several customers, each one gets its own access. Your technicians only see the customers they are responsible for; scripts and software only reach the devices of the access they are started from. If you want, a device can only be controlled from its own access. In the program on your customers' devices your name, logo, colour and support contact appear.

What you need

  • Ideally your own relay (B2). There you create as many accesses as you like and assign accounts.
  • In the Cloud every access is a separate order. Only the system administrator sets up one console account for several accesses — on browserdesk.de that is the operator. Write to info@browserdesk.de for this.
  • A console account as system administrator (create accesses, assign accounts) or as administrator of the access (policy, branding).
  • For the brand in the program: a logo as PNG, JPEG or WebP.

How to do it

1. One access per customer

Tenants → New tenant → enter a name → Save. In the console an access is called a tenant. The customer's devices go into this access (C2, C3).

2. Technicians only for their customers

  1. Users & roles: create an account with the role Technician (B4).
  2. In the row menu (⋮) Assign tenants… → tick the customers' accesses → Save.
  3. For the customer themselves: create an administrator in the access (Edit tenant → tab Administrators). They manage only their own access.

3. Control only from the device's own access

Edit tenant → tab Governance policy → Control only from the device's own tenant:

LevelWho may connect
Off (default)anyone with device ID and device password
Members and computers of the tenantwhoever is signed in to the access in the program or under “My devices”, a computer of the access, or a console account that can see the access
Only computers of the tenantonly computers added to the access. Web access and connecting from the console are then blocked, even for administrators

Then Save. Free accesses are always at least on “members and computers”.

4. Your brand in the program

  1. Edit tenant → tab Branding.
  2. Under Colour & welcome set a Custom accent colour and optionally a welcome text; under Logo upload your logo.
  3. Under Own brand in the program enter the product name (up to 40 characters), support text (up to 240 characters) and support link (https:, mailto: or tel:).
  4. Save.

The devices of the access fetch the branding at start-up and after joining.

How you know it worked

  • A technician with assigned accesses only sees those in Devices and Tenants.
  • A device that does not belong to the access is refused when connecting, for example with “Dieser Rechner ist kein Mitglied des Zugangs, zu dem das Gerät gehört. …” (this computer is not a member of the device's access).
  • In the program on the customer's devices, your name and logo are at the top, below them in small print “powered by BrowserDesk”. Under Einstellungen → Allgemein (Settings → General) the card “Support – <your name>” appears. Window title and notification area carry your name.

What the other side sees

Your customer sees your name, your logo and your support contact in the program. “powered by BrowserDesk” always remains visible in small print.

Good to know

  • The boundary for sending always applies: a script, package or workflow from access A never reaches a device of access B — not even if someone knows its device ID.
  • Without a level, the access is only a group in the address book when connecting. The barrier is then the device password. To separate customers when connecting as well, set the level (step 3).
  • Additionally restrict by network: B7.
  • SVG logos are not shown by the program; it then keeps the BrowserDesk logo. Upload PNG, JPEG or WebP for the program. The web shows SVG too.
  • What is not renamed: installation folder, service, Start menu entry and the signature “ondeso GmbH” remain BrowserDesk. Updates come from the BrowserDesk feed.
  • A program file under your own name (own file name and icon, Windows only) is built by BrowserDesk. There is no way to order it yet — write to info@browserdesk.de. After the first update the file is called BrowserDesk.exe again; name, logo and support in the interface remain.

If it does not work

You seeMeaning and fix
The program still shows “BrowserDesk”The device does not belong to this access, or it has not fetched the branding yet. Restart the program.
The logo is missing in the program but shown on the webIt is an SVG. Upload it as PNG, JPEG or WebP.
A technician sees all customersNo accesses are assigned — without a selection an account sees all. Assign tenants….
After “only computers of the tenant” web access no longer worksIntended. Connect from a technician's computer that has been added to the access, or set the level to “members and computers”.
The support link is not savedOnly https:, mailto: and tel: are allowed.