Tenant isolation
Portal data, endpoint credentials, memberships, notifications, and administrative actions are scoped to the authenticated tenant.
Security
Designed to constrain control.
Snipe RMM combines endpoint access with tenant boundaries, explicit roles, verifiable packages, expiring enrolment, and auditable operations.
Least-privilege roles
Owner, Admin, Technician, and Client View begin with distinct permissions. Tenant owners can adapt delegated access without changing endpoint licensing.
Controlled enrolment
Endpoint and portal invitations are named, expiring, and revocable. Device users do not require portal accounts.
Verified delivery
Agent packages are hash-verified before installation. Production downloads can be delivered through private object storage using short-lived links.
Approved remediation
Scripts and jobs are separated from evidence collection. Administrative approval and audit events establish who authorised an action and where it ran.
Operational recovery
Production service hosting, protected secrets, health checks, logs, and scheduled backups are treated as separate operational controls.
Report a security concern
Send a concise report to [email protected]. Do not send credentials or customer data.