Datto EDR and Datto AV access control

This article describes how subscriptions and roles control the features and functions of Datto EDR and Datto AV.

NOTE  To learn about our data policies, refer to Datto EDR and Datto AV data retention policies and Datto EDR and Datto AV data collection and storage policies. For more details about how our agent surveys your environment, review our Datto EDR and Datto AV FAQs.

Overview

Subscriptions and roles control the Datto EDR and Datto AV features to which users have access. Subscriptions define the overall feature set available to your organization, while roles designate the actions individual users can perform within that feature set.

The following sections explain the feature sets and role-based access privileges or restrictions available to both types of subscriptions.

Datto EDR

With a Datto EDR subscription, your organization will have full access to the application's features. If your service includes Datto AV, its full feature set will also be available.

You can apply the following role-based privileges or restrictions to Datto EDR user accounts:

Role Privileges or restrictions
Administrators

  • Can access EDR platform

  • Full control over all system options
Analysts

  • Can access EDR platform

  • Cannot publish policies

  • No access to Users & Tokens, Activity, Integrations, Webhooks, Settings, Account, or Extensions

Datto AV

If you're only subscribed to Datto AV, your organization will have access to the following areas of the application:

  • Dashboard, Organizations, Locations, Devices, and Profile pages

    • Full access to all features

  • Admin pages

    • Access to features applicable to Datto AV

  • Policies page

    • Only the Datto Antivirus policy will be visible. Available policy settings are:

      • Real-time Protection Scans

        • Scan Archives

        • Scan storage devices on local networks

        • File, folder, and process exclusions

      • Scheduled File Scan Settings

        • Scan All File Types

        • Scan Recommended File Types Only

      • Schedule Full Scan

      • Schedule Quick Scan

  • Alerts page

    • Datto AV alert type will be available

  • Respond page

    • Only the Quarantined Files sub-section will be available, enabling you to view and manage quarantined files across your organization.

  • Tasks list and page

    • Access to view and manage ongoing scans

You can apply the following role-based privileges or restrictions to Datto AV user accounts:

Role Privileges or restrictions
Administrators

  • Can access EDR platform

  • Full control over all Datto AV options

  • No access to access to Search, Analyze, or Report pages
Analysts

  • Can access EDR platform

  • Cannot publish policies

  • No access to Users & Tokens, Activity, Integrations, Webhooks, Settings, Account, Extensions, Search, Analyze, or Report features and pages