ConnectWise RMM integration

Introduction

This article details the integration with ConnectWise RMM and Access Management.

What is Access Management?

ConnectWise Access Management gives partners the tools to secure, monitor, and control access across their environment. This solution can handle User Agent Control (UAC) requests, and it also allows an end user to sign into Windows with administrator privileges.

For more about Access Management, see our quick-start guide.

Requirements

Integration between RMM and ScreenConnect
The Access Management extension for ScreenConnect

Frequently asked questions

How is Access Management billed?

Billing is applied per endpoint with an Access Management policy applied to them.

How to purchase Access Management?

Billing is self-serviced; when you apply Access Management to an endpoint, you will be billed for that endpoint via policy. Volume discounts apply. Contact your account manager for additional information.

Where is Access Management in RMM?

Find Access Management settings under Remote Access policies.

How is Access Management configured?

Configure Access Management settings from within the Access Management policy. By default, Access Management is only visible on endpoints when a host is connected.

What about my ScreenConnect instance?

Access Management configurations from inside a policy in RMM are communicated back to the ScreenConnect instance.

Where do I set Access Management rules?

Access Management auto-approve, auto-deny rules are created, edited, and deleted from the ScreenConnect instance. Create rules from the Access Management tab, edit and delete from the Triggers page.

Where do I approve and deny Access Management requests?

Approve or deny requests from inside the ScreenConnect instance.

Can I still use integrations?

Yes! ConnectWise PSA, Slack, and Microsoft Teams integrations are available.

Is Access Management available for all endpoints?

This functionality is only available for access agents that are installed on 64-bit Windows machines.

Enable the integration in ConnectWise RMM

1. Navigate to Settings > Integrations

2. Locate the ConnectWise Access Management integration

3. Click the toggle to activate ConnectWise Access Management

4. Review the terms and conditions and the pricing for Access Management

When you have finished, select the I agree option from the Agreement Consent menu.

5. Click Save and Proceed to continue to step 3 of the wizard

6. Close the setup window

You have successfully activated the integration. Click Close to return to your integrations.

Applying Access Management by site

Access Management settings are controlled by the Remote Access policy type. You should already have a Remote Access policy with the ScreenConnect integration, and so you will just need to apply Access Management within that policy.

To limit the machines that have Access Management, you can create a policy and apply that policy to a specific site.

Note: With this integration, you must configure Access Management from within RMM, not via the Access Management page in ScreenConnect.

1. Navigate to Settings > Policies

2. Edit an existing policy of type Remote Access

You already have a Remote Access policy with the ScreenConnect integration.

3. Turn on Access Management

Under Control Access for Servers, Control Access for Desktops, or both, click the toggle for Access Management.

Important: By toggling Access Management on, you will be billed for Access Management usage.

4. Customize Access Management settings

Customize Access Management by selecting from the following settings:

Administrative Logon

Show on Host Connections only

Show the credential provider only when one or more ScreenConnect hosts are connected.

Default selected provider on lock screen

This setting determines whether the Access Management credential provider is the default option for administrative logon requests on the lock screen.

Reason input field visible on lock screen

This setting determines whether the reason input field is available in the Access Management credential provider on the lock screen.

Once enabled, you can toggle the Required slider to require your user to specify a reason for the elevation request.

UAC Elevation

Show on Host Connections only	Show the credential provider only when one or more ScreenConnect hosts are connected.
Default selected provider in UAC prompt	This setting determines whether the Access Management credential provider is the default selected provider within UAC dialogs.
Reason input field available in UAC prompt	This setting determines whether the reason input field is available in the Access Management credential provider within UAC dialogs. Once enabled, you can toggle the Required slider to require your end user to specify a reason for the elevation request.

5. Click Save to save the changes to your policy

If your policy has been applied to a site, your changes should take effect across that site.

Reviewing Access Management alerts

Review Access Management alerts in the ScreenConnect Host page, where your endpoints will be marked with a dot icon when there is a pending alert. Select a machine and click the Access Management tab to approve or deny a request.
If you add a default mailing address in the ScreenConnect Mail page, you’ll receive an email when there is an Access Management request pending.
Receive real-time notifications by integrating Access Management with Slack or Teams.
Receive a ticket by integrating Access Management with ConnectWise PSA.

What's next

Explore more Access Management features: