Suggestions
Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!
415 results found
-
Offer access to script jobs from MSC
Not sure if this is possible, but I'd like to be able to assign script jobs, so they'd appear in the MSC. I know this is probably somewhat similar to NoPKG, but it would remove the hassle of authoring the PKG.
1 vote -
Expand '\n' as carriage return in script output
When running scripts via the SimpleMDM web interface, the log/history of a script run shows as a single line.
It would be convenient to be able to see multi-line output within the web interface (instead of having to copy and paste the log output into a text document and then doing a find & replace of '\n' characters in order to be able to read it).
1 vote -
Managing battery settings
Add the option to manage battery settings as :
-Wake for network access
Prevent you mac from sleeping automaticaly when the display is off
-...1 vote -
Support macOS 14 Software Update Enforcement
macOS 14 adds some sort of software update enforcement capability. While the UI is unknown the MDM parts have been outlined here: https://developer.apple.com/documentation/devicemanagement/softwareupdateenforcementspecific?changes=latest_minor&language=objc
Please support this ASAP so we can test the UI and functionality.
1 vote -
Ability to rollout Profiles and Pkgs to shards of devices
The basic idea would be to give each device a shard automatically (but allow it to be overridden) and then be able to set a release schedule for profiles and applications.
For example, on the assign page for a profile, you could select "Shard this assignment" and then be able to select 7 days and have the profile released to (total devices / 7) on each day. Would also need the ability to stop the rollout.
We currently do this in our internal munki with an installable_condition.4 votes -
Combine assignments into groups for easy viewing
Allow the ability to create a group/folder in the App Assignments menu to allow the grouping of assignments. We will have a lot of iPads that require individual apps. This will make it quite cumbersome to parse through.
If we could group the assignments into a folder and title it based on department, viewing the assignments would be a lot easier.
4 votes -
Add profile.created and profile.deleted webhook events
https://api.simplemdm.com/#webhooks
I am requesting the profile.created and profile.deleted events be added to webhooks. Considering the sensitive nature of profiles, it follows these are events which would be of interest to security and IT teams. For example, if an attacker were to gain access to a SimpleMDM instance and craft a malicious profile.
In our case, most profiles are created through the API. Knowing when a profile is manually created in the web app is an important signal as it could mean someone has maliciously gained access or an impending profile misconfiguration is on the way. We also keep a cache…
4 votes -
Support custom attributes for boolean values in profiles
I would like to create a custom configuration profile that uses an attribute to populate a boolean field, like so:
<key>allowCloudDocumentSync</key>
<{{setting_allowCloudDocumentSync}}/>In this case, the default value of the attribute would be "false", but I would be able to override that with "true" at the group or device level.
Currently, since the above is not valid Plist syntax SimpleMDM will reject the profile during upload or pasting into the console.
8 votes -
Add column sorting to all columns across SimpleMDM
For example, under Devices > Enrollments > [MDM Server] > DEP Info, none of the columns (S/N, Model, Color, Last DEP Check-In, Linked Device, Status) can be sorted.
Another example is Config > Profiles. Only the "Type" column can be sorted, but none of the other columns.
I realize we can search and filter on these same pages, but it would be helpful to have sort options as well.
22 votes -
Implement more granular API permissions
In https://suggestions.simplemdm.com/forums/204404-suggestions/suggestions/32990482-scope-api-key API permissions were split up to correspond with API endpoints. While a welcome change, it doesn't go far enough in providing granular access to sensitive MDM actions. Since the the /devices endpoint contains so much (device update, info, restart, shut down, lock, erase, etc.) it is a prime target were an API key to be compromised.
I am asking for API permissions to be split up to be even more granular by MDM command. An API key which only needs to enable/disable remote desktop should not also be able to lock or wipe the device. While I don't…
3 votes -
Support per admin user time zone settings
Under Account > Settings > Time zone an admin can set the global time zone for their entire SimpleMDM instance. This is the timestamp used in logs, enrollment date, etc.
I'd like the ability for each admin user to set their own time zone as well. Having a per account setting is a small quality of life change which makes it easier to grok events. I prefer to read timestamps in my local time. Time data itself should not change, only what's presented to the user.
4 votes -
ability to allow admin to decide if end user can or cannot control their date and time zone settings
For some users, we want to allow them to control time zone while for others we want to lock it down. It'd be nice to have the option.
1 vote -
Disable big popup window from Managed Software Centre
Hi!
We use SimpleMDM on our rental/production macs, not as office computers. And I have gotten feedback that sometimes the "Managed Software Centre" pop up on the middle of the screen, when an update has been waiting for a few days.We want a way to turn this off, since we dont want a suddenly popup on the screen in middle of an event/production/show. And sometimes we have an event for a week or so, and dont want to update a program during that week. Would be nice if it was possible to turn of the popup either on each…
2 votes -
Manage Munki pkginfo settings via API
Add API Endpoints to enable management of the pkginfo settings for an app via the API. This would allow us to manage keys as part of our automation process
1 vote -
Assign profiles to multiple groups from the Profiles Action menu
There's no easy way to assign a single profile to multiple groups at once. Instead, I have to go to the Groups view and click on each group I want to add the profile to, click the profile tab, click Assign Profile, find the Profile I want to add, then click the Assign button. Doing that for each group is tedious.
Instead, I suggest the Profiles view have an option in the Action button to be able to add whichever Profiles are selected to add to Groups. I imagine the resulting view would be a list of groups with a…
17 votes -
allow user roles who (only) see their own device
The idea here is to make our employees trust in the MDM solution. I'd like to give them read-only-access to SimpleMDM to see
1) what is configured
2) what I can see about their device
3) what is NOT possible (I frequently get the question "can you read my e-mail now?")Currently, the lowest level of access still allows to see ALL settings, accounts and apps installed on ANY device.
Being able to restrict the app-listing (similar to the settings in "Allow secret information visibility") would be a helpful feature.
Even better would be linking the SAML-identity from the Enrollment…
13 votes -
Allow for a few different local admin password formats
The current format is often very hard to type (and not easily copied), so it would be helpful if you offered some other password types that were more user and script friendly. 1Password's "memorable" word based passwords are a good example of a strong password, that's also easy type. Bonus points if you omit characters that need to be escaped in scripting (like when using the sysadminctl -secureTokenOn function).
Thanks5 votes -
Include copy button for admin password.
With the escrowed admin password feature, it would be helpful to include a small copy button (similar to those seen on code training/doc sites) to easily copy the password.
As it is now, if you reveal the password, then triple click to select, you end up grabbing a carriage return (and text styling) that will make the password invalid when pasted.
9 votes -
Enable adding multiple devices to app assignment groups Via API
It would be nice to be able to add multiple devices using their device ID's to an app assignment group using the API. There is no easy way to add multiple devices to an assignment group unless they are already in a device group, and you may want to add specific devices in ag group rather than the full group for some apps, IE: installers.
6 votes -
Allow the removal of generated local-admin passwords
When a device has been factory reset, its auto-generated local admin password gets a second, third etc entry depending on how many times it has been wiped.
Once confirming the older local admin passwords are no longer necessary, we should be allowed to remove them to avoid confusion
3 votes
- Don't see your idea?