Manage App Rules

App Rules replaced previously existing 'Global App Settings' in May 2022. Previously existing group specific settings had a corresponding ruleset created and assigned to members retroactively.

App Rules enable Parsec for Teams administrators to configure and assign settings to specific users and computers. App Rules can be batch assigned through the admin dashboard or assigned through the Teams API for increased flexibility. Each Team has a 'Default' ruleset which can be modified, but not deleted. If a team member or computer is not assigned a custom ruleset, the 'Default' ruleset is applied. Team administrators with 'Manage Custom Rulesets' permission can create custom rulesets. Custom rulesets can be configured to  only override specific settings, the rest are inherited from the 'Default' ruleset.

The following settings can be configured per ruleset:

Feature Settings:

  • Show Arcade
  • Show Friends
  • Watermark Stream
  • Use Team Websocket
  • Allow copy and paste
  • Allow Logout on Team Computers
  • Host Privacy Mode
  • Host Virtual Monitors

High Performance Relay Server Settings:

  • High Performance Relay Server Host Addresses

Security Settings:

  • Enforce SAML
  • Enforce Two-Factor Authentication (2FA)
  • Enforce IP address verification
  • Client Session Duration

To modify the 'Default' ruleset, administrators need 'Edit Default Ruleset Settings' permission. Only 'Super Admin' users can change security settings.

Create Ruleset

To create a new ruleset, administrators need 'Manage Custom Rulesets' permission.

  1. On the App Rules tab, click 'Create New Ruleset'
    mceclip1.png
  2. Provide a name for the ruleset
  3. Click 'Create Ruleset'
    mceclip2.png
  4. Configure settings appropriate for expected security and use case, then save changes.
    mceclip4.png

Assign Rulesets

Rulesets can be assigned from the 'App Rules', 'Members & Invites', 'Group Management', or 'Team Computers' tabs, during an invite, or during installation. A user or computer can only have one ruleset assigned at a time. Rulesets assigned to computers override rulesets assigned to users. For example, if a ruleset assigned to a user has watermarking disabled but the same user connects to a computer that has watermarking enabled via app rules, the stream will be watermarked.

App Rules Tab
Rulesets can be assigned to team members or computers under the 'Assigned Members' or 'Assigned Computers' tabs. 
mceclip6.png

mceclip7.png

Members & Invites Tab
App rules can be assigned by clicking the 'Ruleset' dropdown next to the corresponding user, then clicking the appropriate ruleset. Administrators need 'Assign Team Members to Rulesets' to assign rulesets to team members.
mceclip8.png

Alternatively, a ruleset can be assigned when creating an invite to your Parsec for Teams tenant. If a custom ruleset is not selected when creating an invite, the 'Default' ruleset is applied.
mceclip9.png

Group Management Tab
Administrators have the option of applying rulesets to all or only selected members of a group. Group specific settings applied prior to general availability of App Rules will have a corresponding ruleset created and applied to group members automatically.
mceclip10.png

Team Computers Tab
Team computers can have rulesets assigned to them. Rulesets applied to a Team computer take precedence over rulesets applied to users.
mceclip11.png

During Installation
Parsec administrators may choose to assign a ruleset to a Team computer during installation. The Parsec application installer supports a 'team_app_rule_id' parameter to enforce an app rule on first launch, simplifying computer based ruleset management. 

Example:

./parsec_windows.exe /silent /shared /team_id=my_team_id /team_computer_key=team_computer_key /team_app_rule_id=app_rule_id /team_group_id=group_id

Delete Ruleset

To delete a ruleset, select the ruleset and scroll to the bottom. Click 'Delete Ruleset'. Team members and computers will revert back to the 'Default' ruleset if their assigned ruleset is deleted. Administrators need 'Manage Custom Rulesets' permission to delete rulesets.