Conneckter

Hello,

I would like to request a feature that allows granting non-administrative users access to the System Vault with permissions to view, create, and edit scripts.

Current Limitation:

At the moment, access to the System Vault is restricted to administrators. This forces us to elevate users (e.g., editors or script maintainers) to administrator roles just so they can manage scripts.

Problem:

Promoting users to administrators solely for script management introduces unnecessary security risks and violates the principle of least privilege. These users do not require full administrative rights, only limited access to specific resources (in this case, scripts within the System Vault).

Requested Enhancement:

• Introduce granular permission controls for the System Vault

• Allow delegation of script-related permissions (view/edit/create) to non-admin roles

• Ensure these permissions can be assigned independently of full administrative privileges

Benefits:

• Improved security through proper role separation

• Reduced risk of privilege misuse

• Better alignment with enterprise access control best practices

Thank you for considering this request.

Benjamin Strohmaier

Hi Hubert,

we are using AzureSQL Data Source.

Regards,

Benjamin

Hi,

since the switch to a centralized image management for entry icons, we have a lot of duplicate images.

I would appreciate a function to merge multiple images.

Currently, I don't know where each image is anchored and would have the problem of having to search for all objects manually.

The merge function should also update all references to objects in the database accordingly.

best regards

Benjamin

Hi,

I would like to have the "Grant Permisson" Button in other UI Elements like "Context Menu" or "Dashboard Actions".

This Button is only available in the Ribbon Bar "Home".

If I use main header "menu bar" instead of "ribbon" the home section isn´t available.

It´s very complicated to use this Feature, if it´s only available in one section of the software.

best regards

Benjamin

Hi,

is it possible to authentificate RDP connections via Kerberos through SSH Tunnel.

We are using a lot of SSH Tunnels with RDP, HTTPS and SSH itself for Sites and secure Networks.

Therefore we made a Hardend Linux VM Template for VMware and Hyper-V to easly deploy a lightweight VM for SSH tunneling.

This works fine, but as we want to raise the Security on Windows Systems, NTLM isn´t possbile (Protected Users group).

Is there a way to configure Kerberos Authentification in RDM or make a Feature Request to solve this issue?

I already saw some configuration options for KDC for Devolutions Gateway, but it isn´t usable with SSH Tunnels.

thx Benjamin

Hi Patrick,

I am aware that there is an import and export.

I have already mentioned this in my opening.

As this is a feature request, there is currently no solution to my problem.

So I would like to ask for an implementation.

I have also noticed that the syntax is of course subject to an order with regard to priority.

Unfortunately, I can only move the syntax up or down by 1 in the dialog for creating the syntax.

Options like top or bottom creation would be good or dublicate above or under.

Greetings Benjamin

Hi Patrick,

this option only lets me customize the colors of the terminal, but does not make a syntax highlight.

We use regex checks to do color coding.

I would like to set these options globally identical to the settings under "Settings->Types->Terminal->Syntax Highlight".

Greetings

Benjamin

Hi,

I have the problem that I would like to share or define the settings that I use for the Terminal Syntax Highlight with others in my team. Constantly exporting and importing the settings is annoying and also means that not everyone has the same settings.

An import of the XML in the system settings or the configuration via GPO and a shared path would be possible solutions

Hi,

I would like to make a feature request.

RDM already has a function to grant temporary access request. Here the user makes a permission request and the configured administrator can approve it.

My problem is that in most cases this request is lost and the administrator does not receive or notice it.

I would suggest to implement an asisstent, where the administrator himself creates a temporary permission for objects on a certain time for certain users.

I also noticed that chained objects are not automatically included in the approval request (Connection + Password Object configured). So the access to the connection is authorized, but the user cannot authenticate, because the credentials are not passed, because the access to the password object was not authorized.

best regards

Benjamin

Hi,

I would like to have the possibility to save the otp credential on a folder object and the option to inherited the otp credential from a connection.

Example:

I automated the Microsoft Cloud log in and try to add all Administration Websites from M365 to RDM.

this is working great!

I also created a Template of this folder to make it easer to roll out for a new folder structure (Customer)

The Login (User/Password) is set to Inherited and saved on the parent folder.

Now we have the need to add OTP Credentials to make everything more Secure.

The Credential Object from the parent folder alredy has the otp integration saved.

(Username /Password) Credential Entry:

I tried to use the Variable, but it doesn´t worked.

After some troubleshooting, I found out that it only works if I add the otp credentials in the http otp session field.

That´s OK for me, but the Problem is, that I can´t set this selection to Inherited to use the credential object from the parent folder.

It would be great if this is possible in the future.

best regards

Benjamin Strohmaier

Hi Hubert,

Thanks a lot, it´s working.

But now i see two further usability issues.

1. the tree should be expanded in the selection view. Otherwise I have to open it every time.

2. if only one Entry is left, RDM should select it automaticly. I have some Connections, that need mutiple private vault selections. With auto selection I can handle this connections better. (VPN -> RDP or RD-Gateway -> RDP)

best regards,

Benjamin

Hi,

I have a feature request. Is it possible to extend the personal safe search in the connection object so that you do not enter the name of the exact object, but only "contains the following, starts with, etc.".

This would help us extremely.

Because we have personalized accesses for different customers, which we store in our private safes, it is difficult to get all employees to use the same name for the object.

But it would be practicable to have a naming convention, for example that the object starts with a certain name and then when opening the connection the private safe filters the search already.

Since several logon credentials are possible, it is not possible to specify an exact name.

We are using about 5000 Objects in RDM.

And mostly we use the private safe search as Credential Source.

It would be great if you can Help us here.

Hi,

I have a feature request for inheritable folder icons.

At the moment you have to reselect the folder icon everytime you create one.

is it possbile to inherit the folder icon till you explicit change it by yourself.

If a change happen to the folder icon, all subfolder should get the new icon selected at the brackpoint.

this makes some situations very easier in RDM.

best regards

Benjamin Strohmaier

IT Senior Consultant

itelio GmbH

Hi Patrick,

Die Vorlagengruppe ist mir bekannt und mit dieser Arbeite ich auch.

Im Anhang findest du ein Screenshot

Ich erstelle über eine Vorlagengruppe "Kundenordner" die Ordner:

• Anmeldedaten

• Cloud

• Dokumentation

• Standorte

Wenn ich aber in einem dieser Ordner neue Ordner erstelle, möchte ich das diese die selben Symbole erhalten.

Mit freundlichen Grüßen

Benjamin Strohmaier

Hi Patrick,

Danke für deine schnelle Antwort.

Leider helfen mir Vorlagen wenig.

Da ich pro Endkunde einen Ordner erstelle mit 5 unter Ordnern die alle eine anderes Symbol haben.

ab dieser ebene sollen alle Ordner die darunter erstellt werden immer das Symbol der übergeordneten Ordners erhalten.

Es wäre schön wenn Ihr das als Feature Wunsch mit aufnimmt.

Aus meiner Sicht sollte das Ordner Symbol solange vererbt werden bis es an einer stelle manuell verändert wird und aber der stelle mit dem neuen Symbol weiter vererbt.

Danke

Mit freundlichen Grüßen

Benjamin Strohmaier

Hi,

ist es möglich standardmäßig das Ordner Symbol (Icon) zu vererben und bei expliziter neu Auswahl anzupassen und neu zu vererben?

Ich muss Ständig bei neuen Unterordnern das Symbol auswählen, was sehr aufwändig ist.

Mit freundlichen Grüßen

Benjamin Strohmaier

Hi Min,

ich habe gerade im Unternehmen auf die RDM Version 2019.1.25.0 gewechselt.

Erstmal super Arbeit für den stetigen Fortschritt in der Software.

Das Live Log funktioniert nun für die Sophos UTM und bin begeistert.

Jedoch ist das nicht der Fall für die Sophos XG.

Könnt ihr hier auch mal schauen?

Falls Ihr mehr Informationen benötigt, meldet euch einfach.

Mit freundlichen Grüßen

Benjamin Strohmaier

Hi,

in der aktuellen Version 14.1.3.0 ist es nicht möglich in einem eingebettet Browser Fenster (Chrome, IE, Firefox) eine Datei herunterzuladen, ohne das danach die Webseite nicht mehr nutzbar ist.

Sobald das geschieht, muss die Verbindung neu gestartet werden.

Hier ist es egal welche Webseite oder Engine benutzt wird.

Mit freundlichen Grüßen

Benjamin Strohmaier