Specifying Permissions for Users and User Groups in your LogMeIn Account

Specify what permissions users and user groups have when accessing hosts in your account.

1. Central.
   

   Permission	Description
   Enable LogMeIn Central	When selected, users will always work in the LogMeIn Central interface. Otherwise, users will always work in the simple LogMeIn interface.
   Reports	Allow users to view LogMeIn Central reports. To view Hamachi reports, users must also have the following permission: Access networks in the account.
   Alert management	Allow users to create and manage alerts. Premier, Automation or Insight only.
   Configuration management	Allow users to create host preference packages.
   Computer group management	Allow users to create and manage groups of computers.
   View inventory data	Allow users to view inventory reports. Users must also have the following permissions: Reports and Alert Management. Premier or Insight only.
   Inventory management	Allow users to enable/disable inventory data collection for Windows hosts in this account. Only valid for users with access to all computers in the account. Premier or Insight only.
   Create and modify One2Many tasks	Allow users to create and modify One2Many tasks. Premier or Automation only.
   Run One2Many tasks	Allow users to run One2Many tasks. Premier or Automation only.

2. Files, you can grant access to files and folders stored in your account using the Files for LogMeIn feature. For more information, see Files for LogMeIn: Storage for your files and folders.

   Permission	Description
   All files and folders in my account	Grant access to all files and folders stored in your account. This allows the user to read, modify, and delete your files and folders.
   None	Do not allow the user to access the Files feature. None of your data stored in Files is made available unless you choose to share a link.
   Only specific folders	To grant access to specific folders, go to the Files page and click Share folder for any folder. You can choose to either share a link that gives anyone read-only access to the folder or you can invite users who will be able to read, modify, or delete items in the folder. Remember: You cannot invite users to individual files. Individual files can only be shared via link – meaning you can either share a file with anyone who has the link or with nobody at all.

3. Management.
   

   Permission	Description
   User management	Allow users to edit and delete users in this account. To add users, users must also have the following permission: Enable LogMeIn Central.
   Login policy management	Allow users to apply a login policy to all users in a LogMeIn Central account, including the account holder. See How to Set a Password Strength Requirement.
   Login credentials can be saved	Allow users to enable the Remember Login Credentials option on the Account > Security page, which allows users to save host login credentials when connecting to a LogMeIn host. See How to Set Up Automatic Authentication.
   Create desktop shortcut	Allow users to create desktop shortcuts for quick access to LogMeIn hosts.
   Deployment	Allow users to install LogMeIn host software and LogMeIn Backup. To generate Installation Links, users must also have the following permission: Enable LogMeIn Central. To deploy Hamachi networks, users must also have the following permission: Network and Client Management.
   Update and Anti-Virus Management	Allow users to manage Windows and Microsoft updates and to use the Anti-Virus Management feature. To manage updates on multiple computers, users must also have the following permission: Enable LogMeIn Central.Anti-Virus Management features are available for Premier and Security subscriptions only.
   Enable account-level security features	Allow users to edit security settings on the account email address > Account > Security tab.

4. Define the LogMeIn interface users see when accessing LogMeIn host computers.

   Permission	Description
   Group settings apply	Allow users to see the LogMeIn interface made available to members of the assigned User Group.
   Show advanced interface when available	Allow users to see the "Detailed mode" with remote management menus, such as Computer Management, Computer Settings, Performance Info, etc.
   Show simplified LogMeIn interface	Allow users to see the "Compact view" without remote management menu options.

5. Group/Computer Permission.

   Permission	Description
   Group settings apply	Allow users to access all computers made available to members of the assigned User Group. Note: Group settings apply is not visible when editing permissions for a group.
   Access all computers in the account	Allow users to access all computers in the account.
   Specify the groups and computers the selected user can access	Select an entire group by selecting the box next to the name in the left pane. Important: Computers can be reassigned, or moved, from one group to another. If moved, a computer may become inaccessible to some users. See About the Impact of Group Changes (Moved Computers) on User Access.

6. Set Network (Hamachi) permissions. For more information on LogMeIn Hamachi, see Working with LogMeIn Hamachi

   Permission	Description
   Access networks in the account	Allow users to access all Hamachi networks in the account.
   Network and Client Management	Allow users to create and edit Hamachi networks and deploy Hamachi clients.
   Edit Client Defaults	Allow users to change the default settings applied to deployed Hamachi clients.
   Edit Network Defaults	Allow users to change the default settings applied to new Hamachi networks.

7. Once the user has accepted the invitation, the following security permissions become available under Extra Security

   Option	Description
   Emailed security code	Require users to enter a security code when accessing the profile User of [your "Company Name"]. LogMeIn sends the code via email to the specified address. Each code can be used only once.
   Printed security code	Require users to enter a security code from a printed list when accessing the profile User of [your "Company Name"]. LogMeIn generates a list of one-time security codes for printing. Each time a user accesses the profile, he will be prompted to enter a code from the printed list. The user will be able to generate a new list of codes on the Account > Security tab.
   Enforce two-factor authentication for this user	Require users to follow a two-step process to verify their identity. They can choose any method currently available for LogMeIn. The policy cannot force them to use a specific method. For details, see Two-Step Verification.