Manager permissions in TeamViewer allow specific users to manage and control device groups and individual devices within your company. This guide explains how these permissions work, how to set them, and the key differences between permissions at the device group level and the device level.

This article applies to all TeamViewer license holders.

Manager permissions at group level

Manager permissions at group level define what actions a manager can perform on that device group. However, it's important to note that most of these permissions do not extend to the individual devices within the device group. The exception to this rule is the Easy Access permission.

Example:

If you share a device group with another user with the Easy Access permission, they can connect to all devices within that device group without needing additional permissions. However, if they need to change a device's alias, assign a policy, or move the device to another device group, they will need specific permissions at the device level.

To learn how to share a device group with other users, please follow this article below:

Manager permissions at device level

To perform specific operations on a device, such as changing its alias, assigning a policy, or moving it to another device group, managers need permissions set directly on the device. 

To learn how to share a device with other users, please follow this article below:

Check the permission source on a device

To check the permission source on a device, please follow the instructions below:

  1. Go to your device list and click the desired device.
  2. The device detail panel will open. Click the permissions tab.
  3. You can now see who has access to the device. Click the desired user or user group.
  4. Click the permission you want to check the source from.

You can now see where the source permission of the respective permission.

Permissions overview

Required permission combination
Action on the device
  • Group administration on the group to which the device will be added
  • Device administration

Allows the manager to add devices to device groups

  • Group administration
  • Policy administration
  • Device administration

Allows the manager to move devices from one device group to another

Policy administration

Allows the manager to edit policies

Manager administration

Allows the manager to add, edit, and remove managers and delete devices. Deleting a device will delete the device from the company.

It also allows the managers to remove themselves as manager of a device.

Device administration

Allows the manager to edit the device name

Description administration

Allows the manager to edit the device description

Execute script

Allows the manager to execute scripts

Software update

Allows the manager to trigger an embedded agent or system update

Required permission combination
Action on the device group

Policy administration

Allows the manager to edit policies

Group administration

Allows the manager to add, delete, and edit the name of a device group.

Manager administration

Allows the manager to add, edit, and remove managers.

It also allows the managers to remove themselves as manager of a device group.

Permission clusters

To simplify permission management, TeamViewer groups individual permissions into predefined clusters. These clusters represent common permission levels and make it easier to assign the correct capabilities to managers without selecting each permission manually.

When a manager’s selected permissions do not match any predefined cluster, the Custom cluster is displayed automatically.

Device permission clusters

Read only

This cluster allows managers to view and connect to devices with the following permissions:

  • Easy Access
  • Connect using saved passwords (new permission for unmanaged devices)

Read and write

This cluster allows the following device permissions.

  • Access control management section — all options enabled
  • Device administration
  • Policy administration
  • Description administration
  • Custom fields administration

Full control

This is the highest permission level for devices and includes administrative and operational capabilities.

  • Easy Access
  • Device administration
  • Share
  • Policy administration
  • Description administration
  • Custom fields administration
  • Backup policy administration
  • Monitoring policy administration
  • Patch management policy administration
  • Execute scripts
  • Accept access requests (only relevant for Conditional Access)
  • Software update

Custom

Displayed automatically when the manager’s selection does not match any predefined cluster.

Additional standalone permission (only relevant for Conditional Access)

  • Request access

Device group permission clusters

Read only

Allows viewing groups and connecting to devices with the following permissions.

  • Easy Access
  • Connect using saved passwords

Read and write

Allows modifying both group and device settings inside the group.

  • Access control management section: Easy Access enabled

Group management section:

  • Group administration
  • Policy administration

Device management section:

  • Device administration
  • Policy administration
  • Description administration
  • Custom fields administration

Full control

Grants every permission available for groups and devices, except:

  • Request access (only relevant for Conditional Access)

Used when administrators need complete control over group structure, policies, and devices.