Suggestions
Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!
424 results found
-
Ability to rollout Profiles and Pkgs to shards of devices
The basic idea would be to give each device a shard automatically (but allow it to be overridden) and then be able to set a release schedule for profiles and applications.
For example, on the assign page for a profile, you could select "Shard this assignment" and then be able to select 7 days and have the profile released to (total devices / 7) on each day. Would also need the ability to stop the rollout.
We currently do this in our internal munki with an installable_condition.4 votes -
Combine assignments into groups for easy viewing
Allow the ability to create a group/folder in the App Assignments menu to allow the grouping of assignments. We will have a lot of iPads that require individual apps. This will make it quite cumbersome to parse through.
If we could group the assignments into a folder and title it based on department, viewing the assignments would be a lot easier.
4 votes -
Profiles API - add/set attributes for OS type, min and max OS version, and Mac architecture
The current profiles API method to list all profiles doesn't return the scope data that is configured in the management console, and there are no means to set these attributes via API methods (per https://api.simplemdm.com/#profiles as at 2022-09-26).
Please update the list all and retrieve one methods to return this scope data.
Please also add a method to update existing profiles with values for this scope data.
The scope attributes specifically are:
- setting the OS type
- setting the minimum macOS version the profile can be installed on
- setting the maximum macOS version the profile can be installed…15 votes -
Add profile.created and profile.deleted webhook events
https://api.simplemdm.com/#webhooks
I am requesting the profile.created and profile.deleted events be added to webhooks. Considering the sensitive nature of profiles, it follows these are events which would be of interest to security and IT teams. For example, if an attacker were to gain access to a SimpleMDM instance and craft a malicious profile.
In our case, most profiles are created through the API. Knowing when a profile is manually created in the web app is an important signal as it could mean someone has maliciously gained access or an impending profile misconfiguration is on the way. We also keep a cache…
4 votes -
I'd love to see tags implemented as a device organizational tool.
Right now we have groups. But device groups is only one way to view your fleet. I'd love if I could also assign tags to devices. Ideally multiple tags. This way I could have tags for things like "remote" or "customer service" or "need2retire". Then I could use a tag or combination of tags to isolate a special group of devices.
Thanks
10 votes -
Implement more granular API permissions
In https://suggestions.simplemdm.com/forums/204404-suggestions/suggestions/32990482-scope-api-key API permissions were split up to correspond with API endpoints. While a welcome change, it doesn't go far enough in providing granular access to sensitive MDM actions. Since the the /devices endpoint contains so much (device update, info, restart, shut down, lock, erase, etc.) it is a prime target were an API key to be compromised.
I am asking for API permissions to be split up to be even more granular by MDM command. An API key which only needs to enable/disable remote desktop should not also be able to lock or wipe the device. While I don't…
3 votes -
Disable big popup window from Managed Software Centre
Hi!
We use SimpleMDM on our rental/production macs, not as office computers. And I have gotten feedback that sometimes the "Managed Software Centre" pop up on the middle of the screen, when an update has been waiting for a few days.We want a way to turn this off, since we dont want a suddenly popup on the screen in middle of an event/production/show. And sometimes we have an event for a week or so, and dont want to update a program during that week. Would be nice if it was possible to turn of the popup either on each…
2 votes -
Collect RAM inventory data
Hello,
We would like to see the amount of RAM a computer has from within SMDM, within each device inventory and on the Device tab as an extra column.
Our team is looking to refresh hardware, and RAM is the main criteria, but we are unable to gather this data, and everymac.com information is not accurate.
Note that this feature request is separate from the "report on mac model, installed ram and cpu type," because we are not looking to access the data via API.
7 votes -
allow user roles who (only) see their own device
The idea here is to make our employees trust in the MDM solution. I'd like to give them read-only-access to SimpleMDM to see
1) what is configured
2) what I can see about their device
3) what is NOT possible (I frequently get the question "can you read my e-mail now?")Currently, the lowest level of access still allows to see ALL settings, accounts and apps installed on ANY device.
Being able to restrict the app-listing (similar to the settings in "Allow secret information visibility") would be a helpful feature.
Even better would be linking the SAML-identity from the Enrollment…
13 votes -
Allow for a few different local admin password formats
The current format is often very hard to type (and not easily copied), so it would be helpful if you offered some other password types that were more user and script friendly. 1Password's "memorable" word based passwords are a good example of a strong password, that's also easy type. Bonus points if you omit characters that need to be escaped in scripting (like when using the sysadminctl -secureTokenOn function).
Thanks5 votes -
Include copy button for admin password.
With the escrowed admin password feature, it would be helpful to include a small copy button (similar to those seen on code training/doc sites) to easily copy the password.
As it is now, if you reveal the password, then triple click to select, you end up grabbing a carriage return (and text styling) that will make the password invalid when pasted.
9 votes -
Enable adding multiple devices to app assignment groups Via API
It would be nice to be able to add multiple devices using their device ID's to an app assignment group using the API. There is no easy way to add multiple devices to an assignment group unless they are already in a device group, and you may want to add specific devices in ag group rather than the full group for some apps, IE: installers.
6 votes -
Allow the removal of generated local-admin passwords
When a device has been factory reset, its auto-generated local admin password gets a second, third etc entry depending on how many times it has been wiped.
Once confirming the older local admin passwords are no longer necessary, we should be allowed to remove them to avoid confusion
3 votes -
Checking the "Select All" checkbox should apply to ALL enrolled devices (not just the first 100)
Meaning if I want to push an Apple VPP update to all enrolled devices, clicking the "Select All" checkbox only applies to the first 100 (as the ceiling).
We currently only have 105x macOS devices enrolled, but are in the process of bringing over 850x others from VMWare Workspace ONE in a way that's "zero touch" for the user.
You can imagine us having to click the "Select All" checkbox on each 9x pages containing 100x devices/each would be inefficient.Screenshot is from my work Gmail and is just an example of what I would see implemented.
1 vote -
Ability to sort Apple VPP app by the version installed on device
So I'm not clicking the Select All checkbox --> clicking Actions - Install Update for users who are already on the latest version (example in screenshot being v2.0.25 as the latest for that app)
1 vote -
Mapping Scripts to Group(s)
What we are concretely looking for is the possibility of mapping one or more individual Scripts to a Group, so when the enrollment process is running, it also executes the script(s) at the end. For example, a custom script that enables SSH on the Mac device.
6 votes -
Self-service VPP Apps
Some of the apps we distribute from VPP do not need to be installed on all Macs, but should be available for a user to install on demand.
Welding together Managed Software Center and VPP could be tricky, but maybe there could be application stubs in MSC that trigger API calls to SimpleMDM to install a VPP app on the device.
15 votes -
Create a Vanta integration
Vanta is an automated compliance tool. If SimpleMDM created an integration, it would be much easier for us to deploy across various products as part of a comprehensive compliance package.
6 votes -
Support API key expiration
API keys currently never expire. A key can be regenerated to effectively expire it, but there's no way to do so by time. I'm specifically asking...
- Add support for API keys to expire after 30, 60, 90 days, by timestamp, or never.
- Optional. Let the API regenerate or expire keys. Ends up being a one key rules them all situation. Up to debate whether this is a secure approach.
1 vote -
Allow Configurable Log Retention
I would like to be able to customize the log retention filter and length. Not all device logs are needed for longer than 30 days, however important access logs and commands such as locking devices should be able to be kept for much longer.
Alternatively or in addition, having a built in log pipeline to a SIEM would be great. Pulling logs out of the API is a bit of a hassle.1 vote
- Don't see your idea?