ConnectWise Automate - Permission Requirements

 

ezdeploy provides an integration for ConnectWise Automate. In order to connect ezdeploy to your Automate instance, create a User Class and a Service Account per the following:

  • Create new Service Account User Class with the following permissions:

Computers>Update
Locations>Show All>Access
Scripts>Read
Schedule Scripts>Update

Note: If you previously were Toolshed Plugin subscriber you will have User Classes called “EZDeploy Users” and “Toolshed Plugin Users” in your Automate instance. Those should be deleted - plugin removal instructions available at https://stackadvisors.atlassian.net/wiki/spaces/MSPTS2/pages/2332491777

Everyone should create a new User Class like ezdeploy example below:

 

Click the + sign at the bottom of the User Class Manager to add your new class - then click Save once permissions have been applied.

 

  • Create new user for your Service Account like ezdeploy example below:

    1. The user must not be MFA-enabled. To exempt from MFA, check the “Integrator” box.

    2. The Service Account must have Client/Agent group permissions. Unless you have a unique permissions requirement, we recommend using the “All Clients” and “All Agents” groups.

    3. Assign your new user class to your service account user on the Permissions tab by right-clicking anywhere in the User Classes area and then selecting the user class.

    4. Once all settings are in place -click the Add New button to create the user.

  • Double click the “All Agents” group and grant your custom user class “Send Commands”, “View Commands” and “Schedule Scripts” then click Save button.

Additionally you make require further permissions adjustments on individual scripts - see ConnectWise Automate RMM Scripts Troubleshooting

 

 

The content of this site is proprietary and confidential information of Stack Advisors, LLC. It is not intended to be distributed to any third party without the written consent of Stack Advisors, LLC.