Under Reports -> Security: pick a user, and the report lists every job (and any job step with its own override) they have at least one effective job-rela...

Under Reports -> Security: pick a role, and the report lists every user who is a member of it, plus what other roles each of those users also holds. Pure...

A named, human-set scalar value referenced inside a step's command text (SQL, PowerShell, or CmdExec) as a MAconst:Name token -- the same bare-prefix to...

Every permission check comes down to a fixed set of permission keys (View/Edit/Run a job, manage credentials, manage target servers, etc.), granted to roles...

Settings -> Password Policy controls what a generated app-account password actually looks like -- length, letters, numbers, special characters, and word-...

Disabling someone's account under Settings -> Users is a full, immediate stop -- not a soft warning. They can't do anything, no matter how th...

A Fleet-wide list of banned phrases (Settings -> Blacklist), matched against a step's command text the moment it's submitted. Any step containing...

Before a job or step can run against a server, that server has to be registered here first -- it doesn't need to be part of the fleet, just listed. This...

The Activity page is a durable record of who did what, when, and from which workstation -- independent of whether the action was actually allowed. A denied ...

A Gate is a condition a job or step has to satisfy before it's allowed to run or keep running -- think of a real gate: closed, nothing gets through; ope...