How to approve a new device and read its confidence score
Find devices waiting for a yes, approve one or all of them, and see why each one waited.
Browse
On this page
How to do it
Open the Unapproved tab on the roster.
It sits beside the Roster tab. Find it on RMM, then Devices, or on a client's Devices tab. A waiting device is not on the Roster tab until you say yes.
Read the line at the top of the tab.
It says the rule you have set right now. Click Change in Settings > RMM to open the one place the rule lives.
Read the sentence on each row.
It says why that device waits. It may say approval is set to manual. Or it gives the confidence score and your number.
Press Approve on a row, or Approve all at the top.
Both ask you first, and both say the same thing. Approving turns on remote control, script execution and the terminal for that device. Telemetry is already running before you approve. You can turn each one off later on the device page.
To leave one device out, open it and set Remote control to Disabled.
Do this on its Overview tab, after you approve.
What you will have
- Find the devices that wait for your approval.
- Approve one device or all of them.
- Read why a device waited and what its confidence score means.
- Choose how new devices get approved.
Why it works this way: How to approve a new device and read its confidence score
A device waits for one reason: a setting you chose. Approval is manual, or the device scored under your number.
It ships on Automatic. Every device is approved as it enrols, so the tab stays empty.
If it did not work: How to approve a new device and read its confidence score
- The tab is empty. It ships on Automatic, so each device is approved as it enrols. Rows show up when you set approval to manual. They also show when you set a confidence number.
- A waiting device can only report readings. It cannot run a thing and nobody can reach it.
- The score counts only under the middle setting, automatic above a confidence. It is the plain average of what is known. It is advice, not a verdict.
- Egress IP correlation counts trusted devices with the same outside address. Logged-on user match and Domain-joined are checked too. Entra/Azure user is not there yet. It never counts.
- The score fills in on the first inventory report. That is about a minute after install.
- The middle setting needs more than the score. At least two trusted devices in that client must share the outside address. The domain or the signed-in user must also match.
- Auto-approval has caps: three tries per device and six per key each hour. A big rollout trickles through. Each auto-approval raises an alert.
Questions this page answers
Where do I approve a new device?
Open the Unapproved tab on the roster. Press Approve on a row, or Approve all at the top.
Why is a new device waiting for approval?
Either approval is set to manual, or the device scored under your confidence number. Each row says which one.
What does the confidence score on a device mean?
A new device is scored against the ones that client trusts. The score counts only under the middle setting.
Was this helpful?