Skip to content

Configure Remote Access

This guide covers how to enable remote access on your devices and grant it to users.

Enable remote access

Remote access must be enabled before users can connect to devices.

  1. Select the group, tag, or device you want to configure, then open the Configure view (for a tag, this is the only available option).
  2. Go to the Settings section.
  3. Enable Remote console / remote access.
  4. Save and commit the configuration.

Settings can be applied per group, per tag, or per device. See Settings for details.

Remote access can also be fully disabled on the agent side by passing --disable-remote-access during bootstrap. If a device is not accepting remote connections, check both the platform settings and the agent configuration.

Grant remote access to a user

Users need the remote-access:connect permission to access devices remotely.

  1. Navigate to the Roles section (top-right menu) and click + Add role.
  2. Enter a name and optional description.
  3. Enable the remote-access:connect permission.
  4. Click Create.

Then assign the role to a user:

  1. Navigate to the Users section (top-right menu).
  2. Find the user and open the actions menu (⋮), then select Edit.
  3. Select the new role.
  4. Click Save.

The user can now access devices remotely. With no resource restrictions, the role grants full remote access (console, tunnel, file transfer, and reload) on all devices. See Users and Roles for more on role management.

Verify the configuration

Log in as the user and attempt to open a console on a device:

  • If remote access is working, the console opens and the user can run commands.
  • If the user sees "Access denied", verify that the role includes remote-access:connect and is assigned to the user.

Remote access events are recorded in the Audit Log.

What Next?

I want to... Go to
Restrict which actions or devices a role can access Remote Access Permissions
Learn more about roles and permissions Users and Roles
Access a device using qbee-connect qbee-connect
Access a device using qbee-cli qbee-cli
View remote access activity Audit Log