Skip to main content

Security Posture and High-Level Permissions

The section outlines how Device42 ensures data security in transit and at rest, emphasizing the principle of least privilege in agentless discovery.

Security Posture​

  • All data in transit from the Windows Discovery Service (WDS) to the Remote Collector (RC), and from the RC to the Main Appliance (MA) is transferred via Secure Sockets Layer (SSL) or HTTPS.
  • Discovered inventory data is stored in the MA in the end-user environment.
  • Some cloud-connected features send limited data outside the MA when enabled or used. These include usage metrics and guided tours, Enriched Data, Cloud Recommendation Engine analysis, and InsightsAI prompts. Configured integrations, external backup destinations, and support bundles can also transmit data.
  • You can disable usage metric sharing and guided tours in the Appliance Manager.

Required Permissions​

Device42 uses the principle of least privilege in its agentless discovery.

For a detailed overview of permissions, please refer to the Discovery section to locate the relevant jobs and view their required permissions.