Idemeum Docs

Autonomous endpoint platform to govern applications, privileges, and user support on your workstations.

Docs

• Agent troubleshooting: Troubleshoot idemeum AI support agent.
• Analysis AI agent: AI agent that analyses and explains every application and elevation event.
• Allowlisting overview: Control what is allowed to run on Windows and macOS, block malware.
• Allowlisting events: Idemeum tracks every execution across your workstations and represents each application as an event in the cloud.
• Allowlisting rules: With rules you define what is blocked and what is allowed to execute on your workstations.
• Allowlisting control mode: Configure how idemeum agent is enforcing allowlisting rules on each endpoint.
• Application catalog: One-click rules to allowlist and automatically elevate applications.
• Application fencing: Application fencing controls what applications can do once they are running.
• Confidence score: Each application is assigned a confidence score to determine how safe the application behaves.
• Enable allowlisting: Enable allowlisting for your organization.
• Events deep dive: Deep dive into how allowlisting events work for major use cases.
• Publishers view: Discover all publishers in your environment so that you can create allowlisting rules with a single click.
• Snooze pop ups: Prevent multiple block pop ups for the same application.
• Allow verified publishers: Automatically trust all verified publishers on Windows and macOS.
• Create Plant: Creates a new plant in the store.
• Delete Plant: Deletes a single plant based on the ID supplied.
• Get Plants: Returns all plants from the system that the user has access to.
• New Plant: Information about a new plant added to the store.
• Introduction: Example section for showcasing API endpoints.
• Confidence score: Confidence score allows you to quickly assess if the application is safe in your environment.
• Malware reputation: Each executable is scanned for malware using Sophos Intellix platform.
• Architecture: Endpoint Care architecture, design, and terminology.
• Built-in skills: Leverage skills that are developed and tested by idemeum team.
• Changelog: Product updates and release history.
• Chats integrations: Integration AI support agent with chat platforms.
• Control agent branding: Customize how login screen looks when idemeum control agent is installed.
• Control agent health status: Track control agent last check-in time to monitor health.
• Install control agent: Install idemeum control agent on Windows or macOS.
• Control agent logs: Idemeum control agent logs to troubleshoot misconfigurations.
• Control agent requirements: Meet these requirements to install idemeum control agents.
• Control agent troubleshooting: When you have agent installation issues, follow these steps to diagnose the problems.
• Uninstall control agent: Uninstall idemeum control agent.
• Update control agent: Desktop agent can be automatically or manually updated.
• Custom skills: Create custom skills for Endpoint Care.
• Dashboard: Runs represent AI agent end-to-end executions.
• Control agent identifier: Endpoint Control agent manages various Windows registry keys.
• Install support agent: Install idemeum support agent for Windows and macOS.
• Uninstall support agent: Uninstall idemeum support agent.
• Architecture: Endpoint Care architecture, design, and terminology.
• Built-in skills: Leverage skills that are developed and tested by idemeum team.
• Chat integrations: Integration AI support agent with chat platforms.
• Custom skills: Create custom skills for Endpoint Care.
• Guardrails: How every run is secured with guardrail architecture.
• Overview: Care is the agentic platform for IT support.
• Run dashboard: Overview of AI agent runs.
• Run details: Review the metadata details for each run.
• Skill updates: How endpoint care skills are updated for agents.
• Skills overview: Overview of AI agent endpoint skills.
• Support agent overview: Resolution engine for Endpoint Care.
• Agent troubleshooting: Troubleshoot idemeum AI support agent.
• Tools overview: Deterministic, code-reviewed functions that perform support actions.
• Triage agent overview: Categorize and properly route user issues that do not match any skills.
• Endpoint control overview: Endpoint control allows you to control applications, govern privileges, and secure admin accounts on your endpoints.
• EPM overview: Manage local admin rights and automate elevation requests.
• Account auto downgrade: Automatically downgrade admin accounts on your workstations.
• Admin elevation notifications: How IT admins receive notifications when users request elevations.
• Admin / user elevation: You can elevate applications with on-demand account or temporarily promote the user account.
• Elevation events: Control agent captures every elevation event on your workstation and uploads each event metadata to the cloud.
• Elevation requests: Users can submit requests for application elevations.
• Elevation rules: With elevation rules you can define what can auto elevate on your workstations.
• Enable EPM: Enable Endpoint Privilege Management (EPM) for your organization.
• EPM control mode: Configure how control agent is enforcing elevation rules on your workstations.
• Reason for elevation: Users provide context on why they need to elevate an application.
• SUDO control for macOS: Automatically elevate SUDO commands on macOS with Endpoint Privilege Management.
• Technician mode: IT admins bypass rules to perform administrative work on the workstation.
• User elevation notifications: How users are notified when elevation requests are approved or denied.
• Guardrails: How every run is secured with guardrail architecture.
• Quickstart guides: Get started with idemeum by following our simple and quick product guides.
• Quickstart - Allowlisting: Set up application control on Windows and macOS.
• Quickstart - Cloud LAPS: Set up break-glass password rotation for computers and Entra tenants.
• Quickstart - Endpoint Privilege Management: Set up elevation control on Windows and macOS.
• Quickstart - JIT for computers: Set up passwordless on-demand access to servers and workstations.
• Quickstart - JIT for Entra ID: Set up on-demand access to Microsoft Entra ID tenants.
• Idemeum documentation: AI agents to autonomously govern applications, privileges, and support on your endpoints.
• Installation: Install care agent for Windows and macOS.
• Integrations: Explore idemeum integrations with other products.
• Atera RMM: Control agent deployment with Atera RMM.
• ConnectWise PSA: Ticketing integration with ConnectWise PSA.
• HaloPSA: Integrate idemeum with HaloPSA to create tickets for elevation requests, requests JIT accounts, and more.
• Hudu: Hudu LAPS integration for break-glass account management.
• Immy bot: Control agent deployment with Immy bot.
• Level RMM: Control agent deployment with Level RMM.
• Microsoft Intune: Deploy idemeum desktop agent to a fleet of Windows or macOS workstations with Microsoft Intune.
• Ninja One: Control agent deployment with NinjaOne RMM.
• SuperOps RMM: Control agent deployment with SuperOps RMM.
• Syncro RMM: Control agent deployment with Syncro RMM.
• JIT admin access overview: Privileged Access Management (PAM) to eliminate shared credentials, implement on-demand admin accounts, and secure critical accounts with auto password rotation.
• JIT for Entra browser extension: Request Entra credentials from idemeum browser extension.
• Cloud LAPS configuration: Configure idemeum Cloud LAPS to rotate credentials for computers or Entra ID tenants.
• Cloud LAPS overview: Automatic password rotation for critical admin accounts.
• Cloud LAPS view credentials: View break-glass credentials that idemeum auto rotates.
• JIT access auditing: Every Entra or computer just-in-time access is captured in idemeum audit trail.
• JIT for computers accounts: Choose the account types to use when technicians access customer workstations.
• JIT for computers configuration: Configure how you want JIT for computer access to work.
• JIT for computers features: Major features that you can use with JIT for computer access.
• JIT for computers overview: Eliminate shared credentials when accessing customer workstations and servers.
• JIT for Entra configuration: Configure JIT admin access to Entra ID tenants.
• JIT for Entra login flow: Request your on-demand Entra credentials from idemeum admin portal.
• JIT for Entra overview: Eliminate shared credentials and access Entra ID tenants with on-demand admin accounts.
• Bulk tenant creation: Create multiple customer tenants at once with CSV upload or APIs.
• Co-managed JIT login: Onboard your customer co-managed admins so that they can leverage JIT access and elevation approvals.
• Delegate access to tenants: Delegate admin access to customer child tenants.
• Multi-tenant portal (MSP) overview: Idemeum offers multi-tenant architecture to manage multiple customers from a single dashboard.
• Portal settings: Configure general idemeum portals settings.
• User and admin portals: Idemeum offers user and admin portals to view resources and manage settings.
• Privacy policy: Idemeum privacy policy document.
• Run details: Review the metadata details for each run.
• Security overview: Security is the fundamental block of our platform.
• Skill updates: How endpoint care skills are updated for agents.
• Skills overview: Overview of AI support agent skills.
• Contact idemeum support: If you need help please open a ticket or chat with us on Discord.
• Support agent overview: Resolution engine for Endpoint Care.
• Terms of service: Idemeum terms of service document.
• Tools overview: Deterministic, code-reviewed functions that perform support actions.
• Triage agent overview: Categorize and properly route user issues that do not match any skills.
• Uninstall care agent: Uninstall idemeum care agent.
• Demote / disable / delete user: Remove permissions from admin users or completely delete user records from idemeum cloud.
• Mobile app recovery: When you reinstall idemeum app, you need to follow recovery process.
• User groups: Add idemeum admins to user groups.
• User onboarding: Add new admin users to your idemeum portal.
• User source: Configure external user source for mobile admin onboarding.

OpenAPI Specs

• openapi

Optional

• API