How do I give limited admin rights?

On Splashtop On-Prem, an Admin user can remotely access and manage all computers by default.

Sometimes you may want a client to have admin role, but limit their access to only a subset of computers. This allows the client to do things like add computer, remove computer, create user, etc., but only for the groups that you authorized.

Please see instructions below to enable and to use the feature.

Enable group-specific manager feature

Log into Splashtop Gateway as Team Owner. Navigate to Management > Settings. Check the box "Enable group-specific manager role."


Set a user as a group-specific manager

Navigate to Management > Users. Click on the gear icon next to the user whom you want to set as a group-specific manager. Click on "Change role." 



In the resulting dialog box:

  1. Select the "Admin" radio button
  2. Check the "Set as group-specific manager" checkbox
  3. Select the check-boxes for whichever group(s) you want this user to manage



Another way to assign group-specific managers

Group-specific managers can also be assigned from the Grouping page.

Navigate to Management > Grouping. Click on the gear icon next to the group that you want to set a group manager for. Click on "Assign group manager."

In the resulting dialog box, you can choose which user(s) can manage this group.



What a group-specific manager can do

The group-specific manager can perform these functions only on the users and computers in the groups managed by him or her. The group-specific manager will not be able to see the group names, users, and computers in other groups.

  • Rename computer
  • Add/edit computer notes
  • Remove computers
  • Create/enable/disable/delete users
  • Set access permissions
  • Remove authenticated devices
  • Configure user’s 2FA and trusted devices
  • Scheduled Access
  • Preference Policy


  • When an admin is assigned to be a group-specific manager, the management scope is reduced from the whole team to only specific group(s).
  • You can always see which users have been assigned group-specific manager rights by navigating Management > Users. The role for such users is labeled as "Manager (groups)." Mouse over the label to see the list of groups managed by the user.
  • The role of group-specific manager will be changed to Member when the relevant group is deleted from Gateway web portal.





1 out of 1 found this helpful