Skip to content

Control access with Access Groups#

An Access Group is a Jump Desktop for Teams group that links users to computers. Every user in a group can connect to every computer in the group. Groups remove the need to assign access to each computer individually and keep sets of users separate, for example one group per office or department.

Applies to#

  • Jump Desktop for Teams Pro plan (up to 5 Access Groups) or Enterprise plan (unlimited). See pricing.
  • Team administrators.

How access works#

A user can connect to a computer when either of the following conditions is true:

  • The user and the computer are in the same Access Group.
  • The user was added directly to the computer's Remote Access list.

A user or computer can belong to multiple groups. Users can connect to every computer shared through any of their groups.

Remote access also has the following requirements:

No team role grants remote access, including Admin; administrators also require a group or a direct permission.

Example: to keep three offices separate, create New York, LA, and Tokyo groups and add each office's users and computers to its group.

Create an Access Group#

  1. In the Teams dashboard, open your team and click Access Groups.
  2. Click + (New Access Group).
  3. Enter a Group Name and click Add.

Add users and computers#

  1. In Access Groups, click the group.
  2. In Remote Access Permissions, click Add users or computers.
  3. Select users and computers, then click Add.

You can also grant access from:

  • A computer's page: in Remote Access, add Access Groups or users.
  • A user's page: in Remote Access, add Access Groups or computers.
  • An installer: when you add computers, choose the Access Groups and users that receive access.

Remove users and computers#

  1. Open the group.
  2. In Remote Access Permissions, click the menu (⋮) and click Remove users or computers.
  3. Select the users and computers, then click Remove.

The removed users and computers lose the access this group granted; access from other groups or direct permissions remains.

Removing access blocks new connections but does not end sessions already in progress. To disconnect those sessions, see End active sessions.

Rename or delete a group#

  1. Open the group and click the menu (⋮) next to its name.
  2. Click Rename access group or Delete access group.

Deleting a group removes the access it granted. The users and computers remain in the team. Sessions already in progress are not ended.

To modify multiple groups at once, select them in the Access Groups list and use the actions menu.

End active sessions#

After you revoke a user's access, disconnect the sessions they already have open. The dashboard shows active connections only for computers you can connect to yourself, and only if your team's plan includes them. To see who is connected across the team, see See who is connected.

  1. In Users, open the user. Active Connections lists the computers they are connected to.
  2. Open a computer from that list.
  3. In Current Active Connections, click Disconnect next to the user.
  4. Click Disconnect to confirm.

The user can reconnect only if they still have access to that computer.

To disconnect all of a user's sessions at once, disable their remote access. The user then cannot connect to any of the team's computers until you enable it again.

Connect Configurations#

A Connect Configuration assigned to an Access Group applies to every computer in the group. The group's page shows the assigned configuration under Connect settings. For how group and computer configurations combine, see Which configuration applies.

SCIM-managed groups#

Groups provisioned from your identity provider through SCIM show a SCIM badge. For these groups:

  • Manage the group's name and users in your identity provider; Rename access group and Delete access group are unavailable in the dashboard.
  • Add and remove computers in the dashboard with Add computers and Remove computers.