Skip to content

Suggestions

Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!

427 results found

  1. API device profile install status

    In webUI you can see the profile install status, but in API you can only see "assigned" and no visibility of whether it installed or not. This is useful information, particularly in my case when assigning a SCEP profile where the CA is in corporate network. The profile install frequently fails due to devices being off LAN.
    This could be an install status when querying device/profiles or an installed profile list when querying devices, which we'd compare to assigned profiles.

    6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  2. Include "less than macOS version" and "greater than macOS version" for profile scoping

    It would be very helpful to be able to define "less than" and "greater than" macOS version when scoping profiles. For example, I would prefer to specify "less than macOS 12" for a profile to apply to all versions of macOS 11. As it is, I have to update the maximum OS version every time a new dot release comes out.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  3. Control Webhook data

    Webhooks are very limited in what they provide without triggering another API call to pull in more information. The ability to control the payload within the webhook endpoint creation screen would be a huge help in interfacing with other programs. The ability to add static data to the payload (like we can already do to the header) or be able to add dynamic data through attribute support.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  4. Expand Webhook triggers

    If we had the ability to choose which webhook events to subscribe per endpoint (https://suggestions.simplemdm.com/forums/204404-suggestions/suggestions/46289557-support-choosing-which-webhook-events-to-subscribe), the addition of more triggers would be valuable in automating and validating workflows.
    Here are some of the possible triggers:
    abm.device.removed
    profile.added
    profile.updated
    profile.removed
    application.added
    application.updated
    application.removed
    script.added
    script.updated
    script.removed
    script.job.run

    6 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  5. Expand '\n' as carriage return in script output

    When running scripts via the SimpleMDM web interface, the log/history of a script run shows as a single line.

    It would be convenient to be able to see multi-line output within the web interface (instead of having to copy and paste the log output into a text document and then doing a find & replace of '\n' characters in order to be able to read it).

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  6. Managing battery settings

    Add the option to manage battery settings as :
    -Wake for network access
    Prevent you mac from sleeping automaticaly when the display is off
    -...

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  7. Descriptive page titles

    Descriptive page titles would help a lot when navigating history or having lots of tabs open.

    7 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  8. Disable ActivationLock via API

    It should be possible to disable the ActivationLock via API call, this is specificly helpfull if you want to decomission a device.

    8 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  9. Support custom MDM commands

    I'd like to see SimpleMDM support sending custom MDM commands with arbitrary payloads. Advantages being...

    1. Customers don't have to wait for SimpleMDM to implement new commands to start testing. With WWDC coming up this is especially pressing because new commands and/or keys need to be tested quickly during the summer beta cycle for any chance at improvement.
    2. Possible to test beta/RSR updates by passing in the product key to a software update command.
    3. WS1 has this feature and please don't make me say anything nice about WS1.

    As an example, here's how WS1 implements it with the author using EnableRemoteDesktop. …

    25 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  10. ability to allow admin to decide if end user can or cannot control their date and time zone settings

    For some users, we want to allow them to control time zone while for others we want to lock it down. It'd be nice to have the option.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  11. Disable big popup window from Managed Software Centre

    Hi!
    We use SimpleMDM on our rental/production macs, not as office computers. And I have gotten feedback that sometimes the "Managed Software Centre" pop up on the middle of the screen, when an update has been waiting for a few days.

    We want a way to turn this off, since we dont want a suddenly popup on the screen in middle of an event/production/show. And sometimes we have an event for a week or so, and dont want to update a program during that week. Would be nice if it was possible to turn of the popup either on each…

    2 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  12. Allow the removal of generated local-admin passwords

    When a device has been factory reset, its auto-generated local admin password gets a second, third etc entry depending on how many times it has been wiped.

    Once confirming the older local admin passwords are no longer necessary, we should be allowed to remove them to avoid confusion

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  13. Checking the "Select All" checkbox should apply to ALL enrolled devices (not just the first 100)

    Meaning if I want to push an Apple VPP update to all enrolled devices, clicking the "Select All" checkbox only applies to the first 100 (as the ceiling).

    We currently only have 105x macOS devices enrolled, but are in the process of bringing over 850x others from VMWare Workspace ONE in a way that's "zero touch" for the user.
    You can imagine us having to click the "Select All" checkbox on each 9x pages containing 100x devices/each would be inefficient.

    Screenshot is from my work Gmail and is just an example of what I would see implemented.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  14. Ability to sort Apple VPP app by the version installed on device

    So I'm not clicking the Select All checkbox --> clicking Actions - Install Update for users who are already on the latest version (example in screenshot being v2.0.25 as the latest for that app)

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  15. Ability to rollout Profiles and Pkgs to shards of devices

    The basic idea would be to give each device a shard automatically (but allow it to be overridden) and then be able to set a release schedule for profiles and applications.
    For example, on the assign page for a profile, you could select "Shard this assignment" and then be able to select 7 days and have the profile released to (total devices / 7) on each day. Would also need the ability to stop the rollout.
    We currently do this in our internal munki with an installable_condition.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  16. Combine assignments into groups for easy viewing

    Allow the ability to create a group/folder in the App Assignments menu to allow the grouping of assignments. We will have a lot of iPads that require individual apps. This will make it quite cumbersome to parse through.

    If we could group the assignments into a folder and title it based on department, viewing the assignments would be a lot easier.

    4 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  17. Support API key expiration

    API keys currently never expire. A key can be regenerated to effectively expire it, but there's no way to do so by time. I'm specifically asking...

    • Add support for API keys to expire after 30, 60, 90 days, by timestamp, or never.
    • Optional. Let the API regenerate or expire keys. Ends up being a one key rules them all situation. Up to debate whether this is a secure approach.
    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  18. Implement more granular API permissions

    In https://suggestions.simplemdm.com/forums/204404-suggestions/suggestions/32990482-scope-api-key API permissions were split up to correspond with API endpoints. While a welcome change, it doesn't go far enough in providing granular access to sensitive MDM actions. Since the the /devices endpoint contains so much (device update, info, restart, shut down, lock, erase, etc.) it is a prime target were an API key to be compromised.

    I am asking for API permissions to be split up to be even more granular by MDM command. An API key which only needs to enable/disable remote desktop should not also be able to lock or wipe the device. While I don't…

    3 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  19. Allow Configurable Log Retention

    I would like to be able to customize the log retention filter and length. Not all device logs are needed for longer than 30 days, however important access logs and commands such as locking devices should be able to be kept for much longer.
    Alternatively or in addition, having a built in log pipeline to a SIEM would be great. Pulling logs out of the API is a bit of a hassle.

    1 vote
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  20. Report on installed certificates

    I'd like to see SimpleMDM report on installed certificates for all device types. A common feature in other MDMs, CertificateListCommand (https://developer.apple.com/documentation/devicemanagement/certificatelistcommand) has been around since iOS 4 and macOS 10.7 (!).

    While we have other tools to report on certificates (like osquery), it's useful to have MDM as a data source as well since oftentimes installed certificates originate via profiles. Knowing certificate health within the same product has benefits, and could allow for more advanced certificate management directly in SimpleMDM.

    Important fields...
    - Certificate name
    - CA/issued by
    - Expiration
    - Current validity status
    - If possible, whether…

    17 votes
    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
    You have left! (?) (thinking…)
    1 comment  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)
  • Don't see your idea?

Suggestions

Categories

Feedback and Knowledge Base