Under Reports -> Security: pick a user, and the report lists every job (and step with its own override) they have at least one effective job-related perm...

Under Reports -> Security: pick a role, and the report lists every user who is a member of it, plus what other roles each of those users also holds. Pure...

A named, human-set scalar value referenced inside a step's command text as a MAconst:Name token. Add one under Admin -> Constants (Name, Type, Value,...

Permissions resolve NTFS-style: the most specific scope (Step > Job > Folder > Server > Everywhere) that has any grant at all wins, and only wit...

Settings -> Password Policy controls what a generated app-account password looks like. Save Policy writes it as the fleet default; Test Generate tries th...

Settings -> Users Disable/Enable is a full, immediate stop -- no matter how they sign in (Windows, Azure AD, or app account), and it cuts off an already-...

Settings -> Blacklist is a Fleet-wide banned-phrase list (plain text or regex) checked against every step's command text. Blocked by default everywhe...

Before a job or step can run against a server, that server has to be registered here first -- it doesn't need to be part of the fleet, just listed. This...

The Activity page is a durable record of who did what, when, and from where -- including denied attempts, not just successful changes. EVENT (what category ...

A Gate is a condition a job or step has to satisfy before it's allowed to run or keep running -- think of a real gate: closed, nothing gets through; ope...