admin

Users, roles and permissions

How membership, roles and permissions decide what someone can do in an organization — and which powerful ones are deliberately not granted by default.

Security & access control

Device policies

The per-machine gates for remote command execution, SSH and relaying — four independent layers, each owned by a different party, all default-deny.

Security & access control

Configuration reference

The agent's config.toml — where it lives per platform, the settings worth knowing, and which ones the server can and cannot change.

Reference