Set a setting at the right level (relay → access → device)

What it is for

Many settings of a device — allow control, clipboard, updates, Wake-on-LAN, time limits — are set in the console. So that you do not have to touch every device on its own, there are three levels: system (for the whole relay), access (for all devices of an access) and device. The rule is simple: what is closer to the device wins. In the console an access is called tenant.

What you need

• A sign-in to the console with the role Tenant administrator or higher. Other roles see the values; only administrators may change them.
• For the top level (system) the role system administrator of the relay. On browserdesk.de that is the operator, not you.
• The device needs a current BrowserDesk version; some settings name in their hint from which version the device knows them (for example "From client 20261010.24").

How to do it

The order

Each row has three positions: Inherited, On, Off (for selection fields Inherited or a value). Inherited means: this level sets nothing, the level above applies.

One setting for all devices of an access

1. Open Tenants and double-click the access.
2. Choose the tab Devices & updates and expand the section Device settings (tenant) (it starts collapsed), then expand the group you need.
3. Find the row. They are grouped: Access and permissions, Session and picture, Reachability, Software and updates, Preview image (privacy).
4. Choose On, Off or a value and click Save.

An exception for a single device

1. Devices → click the device (G1) → on the left Settings.
2. Change the row under Settings (remote management).
3. Click Apply.

To remove the exception again, set the row to Inherited and click Apply.

Find out where a value comes from

On the right of each row you see effective: with the value that applies on the device, and below it the origin:

If the group title shows for example "2 set", two values in this group are set at this level.

How you know it worked

• The row shows the wanted value next to effective: with the right origin.
• On the device: in the program Einstellungen › Netzwerk (Settings > Network) → card Relay-Einstellungen (relay settings) → section Verwaltete Einstellungen (managed settings). Jetzt vom Relay laden (load from the relay now) fetches the latest state.
• Some switches in the program on the device show a setting fixed by the administration with the sentence „Vom Administrator festgelegt (…) — hier nicht änderbar.“ (fixed by the administrator — cannot be changed here).

Good to know

• When it takes effect: the device takes over the values the next time it connects to the relay. A device without a running session briefly signs in again for this; a device that is offline takes them over at its next sign-in.
• Two kinds of settings, two places: what the device does (permissions, picture, updates, time limits) is in the device settings. Rules for the whole access — who may control, whether scripts are allowed, second factor — are in the tab Governance policy of the same dialog (G3).
• Updates are also controlled via target version and lock (G5).
• One place per setting: a setting exists exactly once on each level. Cross-cutting topics such as the access's email are in the access's Email tab, not in a specialist module.

If it does not work