[GH-ISSUE #2098] [Feature Request] Allow all clients except some in roles #1307

New issue

Open

opened 2026-03-02 02:22:28 +03:00 by kerem · 3 comments

kerem commented

2026-03-02 02:22:28 +03:00

Owner

Originally created by @lqdmist on GitHub (Dec 13, 2024).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2098

Is your feature request related to a problem? Please describe.
Currently when we add a new client including multiple sites, we have to manually add these clients / sites to the correct roles since we do not want to allow all clients to our engineers role.
We have a super admin group which includes permissions to certain sites where no one else can have permission to, so this means we have to select all clients / sites for every role that is not super admin. Mind that we currently have 170 clients with multiple sites so this is a lot of manual click work.

Describe the solution you'd like
Instead of selecting all clients / sites, add an option to allow all clients and or sites except for the selected ones.

Additional context
This feature would save our super admins index finger a whole lot of click work.

Originally created by @lqdmist on GitHub (Dec 13, 2024). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2098 **Is your feature request related to a problem? Please describe.** Currently when we add a new client including multiple sites, we have to manually add these clients / sites to the correct roles since we do not want to allow all clients to our engineers role. We have a super admin group which includes permissions to certain sites where no one else can have permission to, so this means we have to select all clients / sites for every role that is not super admin. Mind that we currently have 170 clients with multiple sites so this is a lot of manual click work. **Describe the solution you'd like** Instead of selecting all clients / sites, add an option to allow all clients and or sites except for the selected ones. **Additional context** This feature would save our super admins index finger a whole lot of click work.

kerem commented

2026-03-02 02:22:29 +03:00

Author

Owner

@P6g9YHK6 commented on GitHub (Dec 13, 2024):

https://github.com/amidaware/tacticalrmm/issues/2053

If I was in your shoes I would make a script to add to the new site id to a predefined list of roles until the deny group feature is implemented.

@P6g9YHK6 commented on GitHub (Dec 13, 2024): https://github.com/amidaware/tacticalrmm/issues/2053 If I was in your shoes I would make a script to add to the new site id to a predefined list of roles until the deny group feature is implemented.

kerem commented

2026-03-02 02:22:29 +03:00

Author

Owner

@lizaoreo commented on GitHub (Mar 8, 2025):

I think a deny group would make a lot of sense in addition to the whitelist/allow list.

@lizaoreo commented on GitHub (Mar 8, 2025): I think a deny group would make a lot of sense in addition to the whitelist/allow list. ![Image](https://github.com/user-attachments/assets/62aa15a7-78f4-484b-b5f0-3ec734e3ee75)

kerem commented

2026-03-02 02:22:29 +03:00

Author

Owner

@24x7-beheer commented on GitHub (Nov 28, 2025):

Yes this will help a lot

@24x7-beheer commented on GitHub (Nov 28, 2025): Yes this will help a lot