Remote management overview
Prerequisite
The new macOS Mojave application security alert restricts the keyboard and mouse movements when using the Remote Control and Direct Access features. When you launch these features for the first time, a dialog displays asking for the access permission. To grant the access, proceed as follows:
- Click Open System Preferences on the Accessibility Access dialog.
The System Preferences pane displays. - Click the padlock icon on the System Preferences pane.
- Enter the administrator's password.
A list of applications or processes running on the device displays. - Select mtxrproxy from the list.
- Click the padlock icon again to close the padlock.
Remote Manager Licenses
Contrary to the other BMC Client Management modules, the Remote Manager requires two different licenses:
- Direct Access
This license allows the administrator to use the Direct Access functionality to directly access remote devices. This license also includes the File Transfer functionality. - Remote Control
This license is required for remotely accessing and controlling the devices.
Remote Manager capabilities and access rights
To be able to directly and remotely access devices an administrator needs specific capabilities and access rights for the different functionalities.
Remote Control through the BCM Java Console
- The Remote Control node is available if the administrator has the Remote Control - View and/or Remote Control Recording View and the Agent Configuration Read capability
- The Configuration tab is available if the administrator has the System Variable Read capability.
- The Recordings tab is available if the administrator has the Remote Control Recording View capability.
- The History tab is available if the administrator has the Remote Control View capability.
- The capability Remote Control - View is required to access remote devices and take over control of these.
- The capability File Transfer - Manage is required if you also intend to transfer files to and from the remote devices during a remote control session.
- The access right Show Session Popup is required if an end user of the remotely controlled device must see an acknowledgement popup that their device is being controlled by an administrator.
Remote Control through a web browser
- Remote Control from a supported browser.
- The capability Remote Control - View is required to access remote devices and take over control of these.
- The capability File Transfer - Manage is not available to and from the remote devices during a remote control session.
- The access right Show Session Popup is required if an end user of the remotely controlled device must see an acknowledgement popup that their device is being controlled by an administrator.
Direct Access
- Direct Access node: Direct Access - View.
- The capability Direct Access - Manage is required to access remote devices and execute any type of operation on their file systems, registry, services or processes.
- The capability File Transfer - Manage is required if you also intend to transfer files to and from the remote devices during a direct access session.
Configuring a security profile for remote control
Capabilities | |||||||
Tasks | RC Recording View | RC Recording Manage | Remote Control View | Remote Control Manage | Agent Configuration Read | System Variables Manage | Access |
---|---|---|---|---|---|---|---|
Record a session | ✅️ | ||||||
View the recordings | ✅️ | ✅️ | Grant access only to those recordings to which devices a BCM administrator has access to * | ||||
Delete the recordings | ✅️ | ✅️ | |||||
Lock/Unlock the recordings | ✅️ | ✅️ | |||||
Download the recordings | ✅️ | ✅️ | |||||
View session history | ✅️ | ✅️ | Grant access only to those sessions to which devices a BCM administrator has access to * | ||||
Delete session history | ✅️ | ✅️ | |||||
Configure recording parameters | ✅️ |
*Access for remote control on request sessions or recordings is not required.