Datto AV and Datto EDR UI availability matrix
This matrix shows which areas of the Datto EDR web console are available when a tenant is licensed for Datto AV only or Datto EDR only. Tenants with both subscriptions can access all areas marked Present in either column.
Legend
- Present: The area is visible and fully accessible.
- Not Present: The area is hidden. The navigation item is removed, and direct URL access redirects to another page.
- Partial: The area is visible with limited functionality. See the notes below the table.
Top Navigation
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Dashboard | Present | Present |
| Alerts | Present | Present |
| Organizations | Present | Present |
| Policies | Present | Present |
| Search | Not Present | Present |
| Analyze | Not Present | Present |
| Respond | Present | Present |
| Report | Not Present | Present |
| Tasks (task dropdown) | Present | Present |
| Admin | Present | Present |
| Profile / account menu | Present | Present |
NOTE The Respond landing page varies by product: AV-only users are directed to the Quarantined Files page, while EDR-only users are directed to the Responses page.
Dashboard
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Dashboard page | Present (AV dashboard) | Present (EDR dashboard) |
| "Monitored Hosts by AV" tile | Present | Not present |
| "Monitored Hosts by EDR" tile | Not present | Present |
| Alerts widget | Present (total count only) | Present (total + severity breakdown) |
| OS breakdown chart | Present (AV data) | Present (EDR data) |
| EDR / AV chart toggle on OS breakdown | Not present | Not present |
NOTE The EDR / AV chart toggle only appears when both subscriptions are active.
Alerts
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Alerts list | Present | Present |
| Alert detail page | Present | Present |
| Datto AV alert type | Present | Not present |
| Datto EDR / Ransomware / Defender alert types | Not present | Present |
| Acknowledge / Unacknowledge | Present | Present |
| Respond (run a response action) | Not present | Present |
| Create Suppression Rule from alert | Not present | Present |
| Rollback (on ransomware alerts) | Not present | Present |
NOTE Alert types are driven by which detection engines are licensed and running. An AV-only tenant never generates EDR-engine alerts.
Policies
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Policies list | Present | Present |
| Create / edit / clone policy | Present | Present |
| Datto Antivirus policy type | Present | Not present |
| Datto EDR policy type | Not present | Present |
| Ransomware Detection policy type | Not present | Present |
| Windows Defender policy type | Not present | Present |
| Automated Response policy type | Not present | Present |
| Detection (detection rules) | Not present | Present |
| Alert Suppression | Not present | Present |
| Datto AV File Submission | Present | Not present |
| Universal AV Exclusion | Present | Not present |
Respond
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Responses (response action history) | Not present | Present |
| Queued Responses | Not present | Present |
| Quarantined Files | Present | Not present |
Analyze
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Analyze section (entire) | Not present | Present |
| Hosts | Not present | Present |
| Processes | Not present | Present |
| Modules | Not present | Present |
| Drivers | Not present | Present |
| Memory | Not present | Present |
| Accounts | Not present | Present |
| Artifacts | Not present | Present |
| Autoruns | Not present | Present |
| Connections | Not present | Present |
| Scripts | Not present | Present |
| Applications | Not present | Present |
| Extensions (per-host) | Not present | Present |
Search and Report
| Area of UI | AV Only | EDR Only |
|---|---|---|
| Search | Not present | Present |
| Report | Not present | Present |
Organizations, Locations, Device Groups, Devices
| Area of UI |
AV Only |
EDR Only |
|---|---|---|
| Organizations list and detail | Present | Present |
| Locations list and detail | Present | Present |
| Device Groups | Present | Present |
| Devices list and detail | Present | Present |
| Assign/unassign policy to org, location, device group | Partial — AV policies only | Partial — EDR policies only |
| Assign License action | Present | Present |
| Scan button | Present | Present |
| Datto AV Scan option in Scan dialog | Present | Not present |
| Datto EDR Scan option in Scan dialog | Not present | Present |
| Extension Options in Scan dialog | Not present | Present |
| License column (shows AV / EDR / Unlicensed) | Present | Present |
| EDR agent status column | Partial — shows Unknown | Present |
| Ransomware Detection (RWD) status | Partial — shows Not Installed | Present |
| Rollback status | Partial — shows Not Installed | Present |
NOTE In an AV-only tenant the Scan dialog forces a disk (AV) scan and disables the forensic (EDR) scan option. The reverse is true for EDR-only.
Admin
| Area of UI |
AV Only |
EDR Only |
|---|---|---|
| Users & Tokens | Present | Present |
| Activity | Present | Present |
| Integrations | Present | Present |
| Webhooks | Present | Present |
| Notifications | Present | Present |
| Registration Keys | Present | Present |
| Devices | Present | Present |
| Settings | Present | Present |
| Account | Present | Present |
| File Flags | Not present | Present |
| Extensions | Not present | Present |
| Jobs | Present | Present |
Tasks
| Area of UI |
AV Only |
EDR Only |
|---|---|---|
| Tasks dropdown in top nav | Present | Present |
| Tasks list and task detail | Present | Present |
| View and manage ongoing scans | Present | Present |
Quick Summary
| Subscription | Unique to this subscription |
|---|---|
| AV only | Quarantined Files · Datto Antivirus policy · Datto AV File Submission · Universal AV Exclusion · Datto AV Scan option |
| EDR only | Analyze · Search · Report · Responses · Queued Responses · Detection rules · Alert Suppression · File Flags · Extensions · Datto EDR, Ransomware Detection, Windows Defender and Automated Response policies · Rollback · Datto EDR Scan option |
| Shared by both | Dashboard · Alerts · Organizations · Locations · Device Groups · Devices · Policies list · Tasks · most Admin pages · Profile |
| Revision | Date |
|---|---|
| Initial release. | 8/31/26 |
