Devices and Desktop policy

See and revoke every computer signed in to Omni Desktop, and set what it may do for the organization and per group.

Two Platform pages under Agents govern Omni Desktop: Devices and Desktop policy. They appear once Omni Desktop is available for your organization. Who may view them, change the policy and revoke a laptop follows your access policies.

Devices

Devices lists every computer signed in to Omni Desktop, with its system (macOS, Windows or Linux), member, app version and whether it is Online now.

Revoke disconnects a computer at once. Its owner is signed out, agents lose access to its folders, and the app shows Mac removed. Nothing on the computer is deleted. Signing in again adds it as a new computer. A member who leaves the organization has all their computers revoked. One member can have up to 20 computers connected at a time.

Platform > Agents > Devices. Shown with sample data.

Desktop policy

Desktop policy sets the most Omni Desktop may do. The Every member row is the organization default and opens a panel with every setting below. A new organization starts with everything on, so turn off what you want to keep closed.

Setting	Options	Default	What it controls
Omni Desktop	On, off	On	Whether members can sign in to the app and let agents work on their computer. Off disconnects every computer it applies to at once.
Local files	None, Read only, Read and write	Read and write	What agents may do in folders a member trusts. Read only makes every trusted folder read only.
Shell	On, off	On	Whether agents may run commands on the computer, inside the sandbox.
Shell can reach the network	On, off	On	Whether those commands may download packages and call web services. Off keeps every command on the computer.
App automation	On, off	On	Whether commands may drive other apps with AppleScript. macOS still asks once per app.
Move to cloud	On, off	On	Whether members may move a conversation, with its folders, to the cloud.
Bring work back	On, off	On	Whether members may bring a conversation’s cloud files back to the computer, choosing file by file.
Browser control	On, off	On	Whether agents may drive the Omni browser, a separate browser on the computer, never the member’s own. Each member allows it per chat, and can take over or stop it at any time.
Computer control	On, off	On	Whether agents may see the screen and use the mouse and keyboard on a Mac. Each member allows it per chat, and can stop it at any time. See Computer control.
Limit agents in browsers, terminals and banking apps	On, off	Off	With it on, agents only look at browsers and banking apps, and click without typing in terminals and code editors. Needs Computer control on.
Keep screenshots	On, off	On	Whether screenshots agents take on the computer show in the chat’s activity. Off, agents still see them, but they are not kept.
When the computer is offline	Ask, Wait for the computer, Continue in the cloud	Ask	What a task that needs the computer does when it is asleep or turned off. See Offline and reconnect.

Every member: the organization default for a new organization. Shown with sample data.

Members can turn any of these off for their own computer, never on beyond what you set. See Your settings and the policy.

Group overrides

Group overrides give a group’s members more than the default. Choose Add group override, pick the group, set its values and Save. Anything the default already turns on shows as on and locked. A member in several groups gets the most any of their groups allows. When their groups pick different offline behaviors, the app asks. Remove override returns the group to the default.

Platform > Agents > Desktop policy: the organization default and a group override. Shown with sample data.

A saved change reaches every connected computer at once, with no restart. If xpander cannot read a member’s policy, for example during an outage, it treats every switch as off until it can.

What is recorded

The audit log records:

• Every sign-in to the app.
• Every file or shell action an agent takes: the action, path, outcome and duration, never file content.
• Every screen action: where it landed, never what was typed or seen.
• Every site the Omni browser opened (the site only).
• Every move to the cloud or back, and every schedule linked to or unlinked from a computer.