Script session with Gateway
0 vote
Hi,
Could you allow script session to run trough Devolutions Gateway please?
It could be useful to run a script on a specified host that is only accessible from the said Gateway.
I have a specific use case to demonstrate what I need:
We want to allow some less technical user (from our support) to run a script (stored in RDM/DVLS) to a host without being admin of the target.
Actually there is no possibility to configure script session to run trough Gateway, only remote PowerShell session can.
But that doesn't fit my need since I have to allow the user that run the session to be admin of the target without being able to restrict it to launch a defined script.
Thanks
All Comments (1)
Hello
It's not something that's supported currently, as you've discovered.
In the medium to long term (2024.3 / 2025.1 time frame) we're working towards introducing a companion service (Devolutions Agent) that will ultimately replace RDM Agent with a number of improvements (notably, it's properly integrated with Devolutions Gateway). That will directly support the use case that you mention.
In the shorter term, there is the possibility for improvement here since with the web-based WinRM we already support running scripts through the Gateway; in terms of letting a non-admin run an admin script that would be handled by PAM. The trick will be integrating that into RDM and I don't know the level of work involved there - the pieces all exist, it's would be a case of tying them together as an interim solution.
I'm going to create a ticket for this forum post and I'll raise it in the next planning meeting we have to see what's feasible to get something working sooner. It might be a little wait to get an answer on that (mainly due to the fact that it's the middle of summer and there is some crossover with different team members having responsibility here being on vacation at different times).
I'll update this post with further details. In the meantime, thanks for your patience and don't hesitate to post back with further questions or comments
Kind regards,
Richard Markievicz