AnyDesk Setup Guide For Admins
AnyDesk Setup Guide For Admins
Version 1.0
Legal Notice
Copyright © 2023 AnyDesk Software GmbH
Technical specifications are subject to change without notice. Transmittal, reproduction, dissemination and/or
editing of this document as well as utilization of its contents and communication thereof to others without
express authorization from AnyDesk are prohibited. Offenders will be held liable for payment of damages. All
rights are reserved.
This document is for informational purposes. It represents Any Desk’s current product and practices as of the
date of issue of this document, which are subject to change without notice. Customers are responsible for
making their own independent assessment of the information in this document and any use of AnyDesk’s
products or services. This document does not create any warranties, representations, contractual commitments,
conditions, or assurances from AnyDesk, its affiliates, suppliers, or licensors. The responsibilities and liabilities of
AnyDesk to its customers is controlled by agreements, and this document is not part of, nor does it modify, any
agreement between AnyDesk and its customers.
AnyDesk is designed to be connected to and to communicate via a network interface. Customer shall establish
and maintain any appropriate measures (such as but not limited to the application of authentication measures,
encryption of data, etc.) to protect the product, the network, its system, and the interface against any kind of
security breaches, unauthorized access, interference, intrusion, leakage and/or theft of data or information.
AnyDesk is not liable for damages and/or losses related to such security breaches, any unauthorized access,
interference, intrusion, leakage and/or theft of data or information.
To protect plants, systems, machines, and networks against cyber threats, it is necessary to implement – and
continuously maintain – a holistic, state-of-the-art security concept. AnyDesk provides such concept. You are
responsible for preventing unauthorized access to your systems, machines and networks which should only be
connected to an enterprise network or the internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g., firewalls and/or network segmentation) are in place. For additional
information, please visit https://anydesk.com. AnyDesk recommends applying updates and to use the latest
available version. Use of versions that are no longer supported, and failure to apply the latest updates may
increase your exposure to cyber threats.
AnyDesk Confidential 1
Version 1.0
Contents
Document overview........................................................................................................................................... 4
Getting started .................................................................................................................................................. 5
Step 1. Set up the administrator account ................................................................................................................5
Step 2. Set up your Team or Organization ...............................................................................................................6
Set up an organization and create users ........................................................................................................6
Set up a team and invite other users ............................................................................................................6
Step 3. Assign permissions to other users ...............................................................................................................7
Step 4. Create shared Address Books ......................................................................................................................7
Step 5. Generate a custom AnyDesk client ..............................................................................................................8
Step 6. View sessions and clients details .................................................................................................................9
my.anydesk II ................................................................................................................................................... 11
User Providers ....................................................................................................................................................11
Admin user provider type ..........................................................................................................................11
LDAP user provider type ............................................................................................................................11
IDP user provider type ...............................................................................................................................14
User account creation and invitation ....................................................................................................................16
Create users .............................................................................................................................................16
Invite users to your team ...........................................................................................................................16
User management ..............................................................................................................................................17
Manage users ...........................................................................................................................................17
Manage roles ...........................................................................................................................................18
Manage groups ........................................................................................................................................19
Manage permission sets ............................................................................................................................19
Address Books ....................................................................................................................................................20
Client Management ............................................................................................................................................21
Custom Client Generator .....................................................................................................................................21
Builds overview ........................................................................................................................................21
License Management ..........................................................................................................................................22
my.anydesk API ..................................................................................................................................................23
my.anydesk I.................................................................................................................................................... 24
AnyDesk Confidential 2
Version 1.0
Revision history
Date Version Description
March 1, 2023 1.0 Initial publication.
AnyDesk Confidential 3
Version 1.0
Document overview
This guide is designed for IT administrators and others who are responsible for setting up the AnyDesk
software. This guide provides information on how to configure the my.anydesk management portal
before using the AnyDesk application.
The document consists of the following chapters:
• Getting started – includes the first steps that must be done after purchasing AnyDesk license.
• my.anydesk II – provides a detailed information on my.anydesk II features.
• my.anydesk I – provides an overview on the my.anydesk I management portal.
AnyDesk Confidential 4
Version 1.0
Getting started
As an IT administrator, you first need to configure the my.anydesk II management portal so that you
and your team can start using all AnyDesk features.
In this chapter, you will learn how to:
• Set up the administrator account
• Set up your Team or Organization
• Assign permissions to other users
• Create shared Address Book
• Generate a custom AnyDesk clients
• View sessions and clients details
AnyDesk Confidential 5
Version 1.0
AnyDesk Confidential 6
Version 1.0
For more information, see User management or Permission management in this document
accordingly.
AnyDesk Confidential 7
Version 1.0
AnyDesk Confidential 8
Version 1.0
Note: For detailed instruction on how to use Custom Client Generator in my.anydesk II, see
Create a Custom Client in Help Center.
4 Click Save Build.
The custom AnyDesk client can be deployed directly. Alternatively, you can share a link with users, so
they can download and install the custom client.
For more information, see Custom Client Generator chapter in this document.
AnyDesk Confidential 9
Version 1.0
For more information about managing sessions, see Sessions in Help Center.
In the Clients page, you can see a detailed overview of all deployed clients assigned to your license. By
selecting one of the clients from the list, the client’s overview page will open.
To access Clients page:
• Log in to my.anydesk II with your administrator account and go to the Clients tab.
For more information about managing clients, see Clients in Help Center.
AnyDesk Confidential 10
Version 1.0
my.anydesk II
my.anydesk II is a next-level user management portal which offers a wide range of possibilities for
users and organizations.
With my.anydesk II, you can view sessions details, create personal or company Address Books, view
your license details, invite other users, create users, manage permission sets for users, and other.
User Providers
User providers define how new users are created for an organization. This feature is exclusive to our
Enterprise-Cloud license.
Our my.anydesk II management portal supports three mutually exclusive user provider options:
• Admin – creating users in my.anydesk II locally.
• LDAP – creating users via LDAP protocol.
• IDP – creating users via third-party identity provider.
AnyDesk Confidential 11
Version 1.0
Configure LDAP
You need to configure your LDAP-based identity provider to create a connection to my.anydesk II.
To configure LDAP:
1 Scroll down to the LDAP Setup section, click Edit and provide the following information:
a RDN LDAP Attribute - type the name of LDAP attribute, which is used as RDN (top attribute) of typical
user DN. Most often, this optional attribute is the same as the Username LDAP attribute. For example,
for Windows Active Directory, it is common to use cn as RDN attribute when username attribute might
be sAMAccountName.
b UUID LDAP Attribute - type the name of LDAP attribute, which is used as unique object identifier (UUID)
for objects in LDAP. For Windows Active Directory, it should be objectGUID. If your LDAP server does
not support the notion of UUID, you can use any other attribute that is unique among LDAP users in the
tree. For example, uid or entryDN.
c User Object Classes - type all values of LDAP objectClass attribute for users in LDAP divided by comma.
For example, inetOrgPerson,organizationalPerson. Newly created users will be synchronized to LDAP
with all those object classes and existing LDAP user records can only be found if they contain all those
object classes.
d Connection URL - paste a connection URL to your LDAP server.
e Users DN - type the full DN of the LDAP tree where your users are. This DN is the parent of LDAP users.
For example, ou=users,dc=example,dc=com if your typical user has a DN like
uid=john,ou=users,dc=example,dc=com.
f Bind DN - type the DN of the LDAP admin. This will be used by my.anydesk II to access the LDAP server.
g Bind Credential - type the password of the LDAP admin.
AnyDesk Confidential 12
Version 1.0
h User Search Filter - type the name of the LDAP filter used to search for users. Leave this empty if no
additional filtering is needed and you want to retrieve all roles from LDAP. Otherwise, make sure the
filter name starts with ( and ends with ), for example, (filtername).
i Batch Size - type the number of LDAP users that should be imported from LDAP to my.anydesk II per
transaction.
j Periodic Full Sync - turn on the toggle to perform periodic full synchronization of LDAP users to
my.anydesk II. If enabled, the Full Sync Period field must be provided.
k Full Sync Period - enter the time (in seconds) that should pass before my.anydesk II attempts to
synchronize with the LDAP server again. Periodic Full Sync should be enabled.
l Periodic Changed Users Sync - turn on the toggle to perform periodic synchronization of changed or
newly created LDAP users. If enabled, the Changed Sync Period field must be provided.
m Changed Sync Period - enter the time (in seconds) that should pass before my.anydesk II requests the
LDAP server for changed or newly created LDAP users. Periodic Changed Users Sync should be enabled.
2 Click Finish edit.
Import roles
You can import roles to my.anydesk II from your LDAP server.
To import roles:
1 Scroll down to the Import Roles section, click Edit and provide the following information:
a Roles DN - type the LDAP DN where roles of this tree are saved. For example, ou-
roles,dc=example,dc=org or ou=finance,dc=example,dc=org.
b Role Name LDAP Attribute - type the name of the LDAP attribute that is used in role objects for the
name and RDN of the role. Usually, it will be cn. In this case typical role object may have DN like
cn=Group1,ou=groups,dc=example,dc=org or cn=role1,ou=finance,dc=example,dc=org.
c Role Object Class - type the object class(es) of the role object. If more classes are needed, please
separate them with commas. In a typical LDAP deployment, it would be groupOfNames. With Windows
Active Directory, it is usually group.
d LDAP Filter - enter a custom filter to query for specific LDAP roles. Leave this empty if no additional
filtering is needed and you want to retrieve all roles from LDAP. Otherwise, make sure the filter name
starts with ( and ends with ), for example, (filtername).
e User Roles Retrieve Strategy - select one of the following ways of retrieving user roles:
o Load roles by 'member' attribute - roles of users will be retrieved by sending an LDAP query to
retrieve all roles where 'member' is the user.
o Get roles from user 'memberOf' attribute - roles of users will be retrieved from the 'memberOf'
attribute of the user or from the Member-Of LDAP Attribute.
f Membership Attribute Type - there are 3 different options that are dependent on the User Roles
Retrieve Strategy:
o DN - only available with the User Roles Retrieve Strategy – Load roles by role ‘member’ attribute.
LDAP role has its cn members declared in form of their full DN. For example,
member:uid=john,ou=users,dc=example,dc=com.
AnyDesk Confidential 13
Version 1.0
o UID - only available with the User Roles Retrieve Strategy – Load roles by role ‘member’ attribute.
LDAP role has its groupOfNa members declared in form of pure user uids. For example,
memberUid:john.
o memberOf - only available with the User Roles Retrieve Strategy – Get roles by role ‘memberOf’
attribute. It specifies the name of the LDAP attribute on the LDAP user that contains the roles the
user is a member of. By default, it is 'memberOf'.
2 Click Finish edit.
LDAP mapper
There are certain predefined User-attribute-ldap-mappers to ease up the setup procedure. These
mappers make sure that user-specific attributes are correctly mapped. They include:
• Username
• Lastname
• Firstname
• Createtimestamp
• Modifytimestamp
• Email
AnyDesk Confidential 14
Version 1.0
• IDP Mapper – enables to map roles from your organization to users in my.anydesk II. This way, you
do not need to assign roles to users manually. For more information about IDP mapper, see Set up
IDP mapper in Help Center.
Configure IDP
To configure IDP:
1 Scroll down to the Import Roles section, click Edit and provide the following information:
a Roles DN - type the LDAP DN where roles of this tree are saved. For example, ou-
roles,dc=example,dc=org or ou=finance,dc=example,dc=org.
b Redirect URI - Generated automatically when the IDP setup is completed. Copy the Redirect URI value
after finishing the setup and paste it to your respective identity provider.
c Client ID - Copy the Application (Client ID) value from your IDP and paste it here. It is used to register
my.anydesk as an OIDC client with your provider.
d Client Secret - Copy the Client Secret value from your IDP and paste it here. It is used to register
my.anydesk as an OIDC client with your provider.
e Token URL - Copy the Token endpoint value from your IDP and paste it here. It returns the access
tokens, ID tokens, and refreshes tokens to the client (my.anydesk).
f Authorization URL - Copy the Authorization endpoint value from your IDP and paste it here. It is used for
authentication and authorization of my.anydesk client.
g Trust Email - Turn the toggle off to let users verify their email address via my.anydesk II. Turn the toggle
on to disable my.anydesk II email verification.
h Backchannel Logout - Turn on the toggle to enable the support of backchannel logout by configured IDP.
If enabled, the Logout URL field must be provided.
i Logout URL - Provide the endpoint to log out users from external IDP. Backchannel Logout must be
enabled.
j Allowed Clock Skew - Provide value in seconds (the default value is 0). It determines the acceptable
skew when validating IDP tokens.
k Default Scopes - The scopes included when requesting authorization. The default is openid. Provide a
comma-separated list of additional scopes you want to request.
l Validate Signatures - turn on the toggle to enable signature validation of configured IDP. If enabled,
the JWKS URL field must be provided.
m JWKS URL - URL where my.anydesk II can retrieve the keys for the configured IDP. Validate
Signatures must be enabled.
2 Click Finish edit.
3 After saving the identity provider, copy the assigned Redirect URI.
4 Open your identity provider and go to Authentication.
Note: Microsoft AzureAD identity provider is used in this example to showcase the procedure.
You can use any other third-party identity provider.
AnyDesk Confidential 15
Version 1.0
5 Click Add a platform, select Web, and paste the Redirect URI you copied after saving the identity
provider in my.anydesk II.
6 Click Configure.
For more information about IDP setup, see Configure IDP in Help Center.
Create users
Multiple users that are assigned to your Enterprise-Cloud license are called an organization. You can
create users in my.anydesk and this way add them to your organization.
Note: For the Enterprise-Cloud license, you can create users manually only if you set your user
provider type to Admin. To learn how to manage user providers, see Admin user provider type
in this document.
To create a user:
1 Log in to my.anydesk II with your administrator account and navigate to Users.
2 On the opened page, click Create User and in the pop-up window, enter the user’s first and last
names and provide their email.
3 Click Invite.
You can also create multiple users at once.
To create multiple users:
1 Log in to my.anydesk II with your administrator account and navigate to Users.
2 Click Create User and in the pop-up window, click Advanced.
3 On the next page, type the email addresses of users you want to add into the text box.
Note: You can also drop a CSV with a list of users into the text box.
4 Click Proceed.
AnyDesk Confidential 16
Version 1.0
• The user already exists and is reassigned to the new license. If the invitation is accepted, a user is
now part of the team.
To invite users to your team:
1 Log in to my.anydesk II with your administrator account and navigate to Users.
2 On the opened page, click Invite User and in the pop-up window, enter he user’s first and last
names and provide their email.
3 Click Invite.
After that, the user will receive an invitation email to their email address with a request to join your
team.
User management
In my.anydesk II, after you add or invite users to your license, you can manage users, assign roles to
them and grant permissions on what they can do and see within my.anydesk II management portal.
Manage users
Note: Applicable for Standard, Advanced, or Enterprise-Cloud license.
You can view the detailed information of each user when opening the user overview page. As an
Admin, you can edit, delete, add new users, and assign different roles to the users and add them to
groups.
To open the user overview page:
• In my.anydesk II account, go to Users and open the needed user from the list.
AnyDesk Confidential 17
Version 1.0
You can also delete or disable the user by clicking Options in the upper-right corner of the page and
selecting either Delete User or Disable User depending on what you need.
By deleting a user, you also delete their personal address book. This action cannot be reversed.
If you disable a user, the user will no longer be able to log in and access my.anydesk II. Disabled users
are also not considered part of a team or organization in relation to the maximum user count defined
by the license.
Users can be disabled or deleted by administrators or users with the appropriate permissions.
Manage roles
Note: Applicable for Enterprise-Cloud license only.
User roles are entities that contain one or more permission sets. You can create a role with different
permission sets and assign it to a user or a group. Depending on the role the user is assigned to, user
can either only view, view and edit, or have no access at all to different sections of my.anydesk II user
management portal.
Within my.anydesk II, there are default roles with permission sets already assigned to it. You can view
the following roles:
• user - the default role for every user. The User role has the User permission set assigned to it. With
this permission set the user can view and edit Address Books, Clients, Sessions, License, and
Invoices sections as well as their personal profile.
• accountant - a role for a person within your organization that deals with invoices. The role has the
Accountant permission set assigned to it which grants the access to only view the Organization,
License, and Invoices sections.
• admin - a role allows the user to view and edit all the section of my.anydesk II management portal
apart from License, Invoices, and Personal profile.
• data_protection_officer - a role allows the user to view all the section of my.anydesk II
management portal apart from Builds and Personal profile.
• owner - a role has no access to sections. This role is designed for a company owner who is in
charge of the license.
• support_agent - a role allows the user to view the Users, Groups, Address Books, and Clients
sections of my.anydesk II management portal.
To create a new role:
1 In my.anydesk II account, go to Roles.
2 Click Create role and in the pop-up window, provide the following information:
a Name – type the name of the role.
b Description – type the short description of the role.
3 Click Save role.
Once you open the role, you will see a list of all users the role is directly assigned to, and a list of all
permission profiles and groups it is linked to.
AnyDesk Confidential 18
Version 1.0
Manage groups
Note: Applicable for Enterprise-Cloud license only.
Individual users can be organized and segmented by roles and groups. These two segmentation tools
can be created manually or via mappers and importers through the user provider setup.
If you want to assign roles to several users, you can do that by creating a group. Groups are a list of
users with the same permission sets. You can create a group with one or multiple roles assigned to it,
and then add users to that group. This way, all members of the group will have the same roles. A user
can be part of multiple groups.
To create a new group:
1 In my.anydesk II account, go to Groups.
2 Click Create group and in the pop-up window, provide the following information:
c Group name - type the name for your group.
d Description - type a short description for the group.
3 Click Save group.
After that, you can add users to the group and assign roles to it.
AnyDesk Confidential 19
Version 1.0
e Access Control - for each section, select either No Access, View, or View & Edit depending on what you
want users within the assigned role to have access to.
Address Books
The AnyDesk Address Book is a list of your contacts (devices you connect to). By adding tags to
contacts, you can filter the devices.
Each user has a personal Address Book. If the user is a part of an organization or a team, they can also
have access to organization's/team’s Address Book. Organization’s or team’s address books can be
summarized as shared address books. The shared address book is an address book visible to all
licensed users.
The personal address book is an address book that is directly linked to a user account. This means that
only the owner of the personal address book can view and edit it. The personal address book is
automatically created after every user account creation.
Address Books are synchronized with the AnyDesk client. Whenever you make changes to the contacts
or the Address Book itself in the my.anydesk II user management portal or the AnyDesk client, it will be
updated across both platforms.
To access the personal address book in my.anydesk II, go to the Address Book section and select the
Personal tab. You can add and edit Address Book entries and set and delete tags.
To access the address book in the AnyDesk client, in the upper-right corner of the client, click >
Address Book.
AnyDesk Confidential 20
Version 1.0
Client Management
A client is an AnyDesk application installed on your device. Within the my.anydesk II management
portal, you can view, filter, and manage clients that are linked to your license.
To access clients:
• Log in to my.anydesk II with your administrator account and navigate to Clients.
Here, you can see details of the clients deployed and assigned to your license.
Clicking on one of the clients will display the client details. Here, you can remove the client from the
license, change the alias, and view the session history.
Builds overview
Builds are custom clients, or custom AnyDesk applications, which you can create using the Custom
Client Generator.
AnyDesk Confidential 21
Version 1.0
In the Builds tab, you see an overview of all custom client configurations created by you or others in
your license that have the permission to do so. On the Builds page, view the following information for
each configuration:
• Build name - The name of the created build.
• Platform - The operating system for which the build was created.
• Version - The version number of the created build.
• Download type - Type of the download link for the build. It can be either Private or Public.
You can copy the URL of that custom client configuration by clicking and then share it with others.
If the Download type is Private, then people using the URL will need to log into an account linked to
your license to download it. If the Download type is set to Public, then anyone with the link can
download that custom client.
To download the custom client with that configuration to your device, click
Users with adequate permission have access to the custom client generator. This tool creates client
configurations that define the features available within the custom client. The configuration is called
build.
License Management
You can manage your current license in the my.anydesk management portal.
To access license management:
1 Log in to my.anydesk II with your administrator account and navigate to License.
AnyDesk Confidential 22
Version 1.0
my.anydesk API
The my.anydesk REST-API can be used to retrieve and export license and client information from your
my.anydesk account. The API is currently available for my.anydesk I. A new API for my.anydesk II with
extended functionality is currently being developed.
For more information about API, refer to this Help Center article.
AnyDesk Confidential 23
Version 1.0
my.anydesk I
my.anydesk I is our legacy customer portal. It is still available for customers to use.
Note: Configurations for custom clients done in my.anydesk I will not be synced to my.anydesk II. The
my.anydesk I portal will eventually be discontinued.
The my.anydesk I portal does not include user management. Only a single account can be created
there. When purchasing AnyDesk, you will receive two emails. Open the Your AnyDesk Credentials
email. In it, you will find your username and password for my.anydesk I.
Once logged in to your my.anydesk I account, you have five main tabs:
• License: View your license details, such as license key or expiration date and manage your license.
• Clients: Display all licensed AnyDesk clients deployed on devices. Change their alias, remove them
from your license, or leave a comment.
• Sessions: A Session history is displayed, allowing you to view/edit comments, end active sessions,
and export the information.
• Files: Here, your custom AnyDesk clients are being saved. You can also create new ones.
• Settings: Change your general settings, payment options, customer, and company information.
View and pay your invoices.
More information and helpful guides to the my.anydesk I portal can be found in our Help Center.
AnyDesk Confidential 24
Version 1.0
AnyDesk Confidential 25