Disable Backstage Per User
As an MSP who uses this product for multiple clients, we were concerned to realize that our clients setup with users to work remotely also have the ability to backstage into their machine. Now usually this is not an issue as they do not notice and mess with that setting, but we noticed a user recently who figured it out and although nothing was done inside of the session, is highly alarming to us that the only option currently is to either allow it for all users globally or turning on consent (which seems to be quite buggy) for all users which we also do not want as we use backstage as techs often and already have a gazillion MFA measures such as logging into ScreenConnect accounts. Is this something ConnectWise is already working on? It seems like quite the security risk with how it is setup now.
Answer
We will be releasing an updated permission specifically for Backstage in early q4. Currently to disable the Backstage feature, remove the SwitchLogonSession permission from a user's role.
Customer support service by UserEcho
We will be releasing an updated permission specifically for Backstage in early q4. Currently to disable the Backstage feature, remove the SwitchLogonSession permission from a user's role.
https://docs.connectwise.com/ConnectWise_Control_Documentation/Get_started/Administration_page/Security_page/Define_user_roles_and_permissions/List_of_role-based_security_permissions