RMM feature checklist

Live device inventory

Every enrolled endpoint appears in one browser-based device listing.

Online, offline, and reachability status

Hardware inventory

Operating system and version inventory

CPU, memory, and disk details

Public and private IP addresses

Network interface information

Installed application inventory

Version, publisher, install date, and install context are available per device.

Local user account inventory

Device search

Fuzzy search covers device names, hostnames, IPs, users, and table fields.

Stackable device filters

Filter by platform, OS, device type, tag, status, patch compliance, and more.

Saved personal and shared views

Configurable device columns

Bulk device actions

Run updates, restarts, scripts, automations, tagging, grouping, and more in bulk.

Device groups and nested subgroups

Unlimited-depth group hierarchy

Device tags

Use tags for classification, automation targeting, and monitor policies.

Workspace, group, and device custom fields

Device CSV export

Exports all matching devices and available columns from the current filtered view.

Memory utilization monitoring

Disk space monitoring

Disk encryption status monitoring

Disk throughput monitoring

Disk IOPS monitoring

Disk latency monitoring

Disk queue length monitoring

Disk active time monitoring

Disk SMART status monitoring

Online and offline connection monitoring

Network ping latency monitoring

Network saturation monitoring

Abnormal upload monitoring

Local user account drift monitoring

Failed login monitoring

Antivirus status monitoring

Application presence monitoring

Process state monitoring

Service state monitoring

Windows Event Log monitoring

Uptime monitoring

Custom script-based monitors

Evaluate PowerShell, Bash, Zsh, Python, Go, Ansible, or osquery output.

Monitor-triggered remediation

Fleet-wide pending update view

Per-device update view

Manual single-device patch installation

Bulk patch installation

Scheduled patch deployment

Security update targeting

Windows definition, security, and feature update categories

macOS system and Apple application updates

Linux kernel, security, and general update categories

Patch delay

Set category-level install delays for Windows and macOS updates.

Patch deferral

The same category-delay control, using the term many RMM evaluations use.

Update rings

Stage Windows and macOS updates with progressively longer category delays.

Delayed patch deployment

Delay categories independently before the scheduled automation installs them.

Linux canary patch rollout

Stage Linux updates with tagged canary groups before broad rollout.

Reboot only when updates require it

End-user reboot prompts

Windows KB exclusions

Expiring patch exclusions

Patch install history

Patch failure logs and downloadable output

Installed software inventory

Delivered through Level automation using the Windows Package Manager catalog.

WinGet application installation

WinGet application upgrades

WinGet application removal

Microsoft 365 deployment for Windows

Microsoft 365 deployment for macOS

Homebrew package installation

Homebrew package upgrades

Homebrew package removal

Linux package installation

Supports Apt, Yum, Pacman, Snap, and Flatpak.

Linux package upgrades and exclusions

Linux package removal

Supports tested Wayland environments and X11 when a graphical session is running.

Browser-based remote desktop

Unattended login and lock-screen access

A graphical login or lock screen must be running on the endpoint.

End-to-end encrypted sessions

Peer-to-peer connections

Encrypted relay fallback

Multi-monitor switching

Clipboard sharing

Keyboard and mouse control

Active user-session switching

End-user remote session notification

End-user approval before remote control

Group-specific remote control approval rules

Terminal, files, processes, and services remain available without a graphical session.

No VPN required

New device enrollment trigger

Device enters group trigger

Device leaves group trigger

Tag applied and tag removed triggers

Custom field changed trigger

Monitor remediation trigger

Inbound webhook trigger

Automation completion trigger

Hourly, daily, weekly, monthly, and one-time schedules

Manual and ad-hoc automation runs

Multi-step automation pipelines

Conditional actions and trigger filters

Filter on OS, group, tag, custom field, variables, or prior action outcomes.

Technician approval steps

End-user approval steps

Delays and controlled pipeline exits

Nested automation calls

Automatic retries and configurable failure handling

Language availability and script behavior depend on the target endpoint.

Run scripts as local system or current user

Ad-hoc saved and new script runs

Script variables and output capture

Automation variables passed between steps

Built-in device and group system variables

Custom fields inside scripts and actions

Automation run history, status, and action output

Run lvl from a technician terminal. It is not the Level agent that runs on devices.

List enrolled devices, including name, OS, and status, from the terminal.

List patches you can install from the same prompt.

List files in the repository that automations already deploy to devices.

List monitors and policies without leaving the terminal.

lvl automation spec prints a spec. lvl automation apply -f diffs and saves it. A coding agent can draft the spec; the technician reviews and saves it.

Run a saved script, a --file, or a --command on target devices.

lvl skill install drops SKILL.md where a compatible coding agent can read it.

You bring the model and tokens. Level does not host the LLM.

Any coding agent that can load a SKILL.md can use the Level skill.

A coding agent can inspect device context and draft scripts or automation specs. The technician reviews before saving or running.

Custom technician roles

Independent automation, script, monitor, and tag permissions

Separate remote control and background management permissions

Device, automation, and script group access scopes

Automatic access to future subgroups

Individual two-factor authentication

Organization-wide mandatory 2FA

Microsoft Entra single sign-on

Google Workspace single sign-on

Generic OpenID Connect SSO

Configurable inactivity timeout

IPv4, IPv6, and CIDR login allowlists

Global and resource-scoped audit trail

Before-and-after configuration history and code diffs

BitLocker, FileVault, and LUKS encryption visibility

Enable, disable, and rotate disk encryption keys

Windows Defender definition updates and scans

End-to-end encrypted remote and background sessions

Live device health dashboard

Device count, status, and platform distribution

Security score and endpoint posture reporting

Patch coverage and compliance reporting

Alert trend reporting

Automation activity reporting

Technician time and activity insights

Group-scoped reporting

Click-through from reports to matching devices

PDF report export

Device inventory CSV export

Searchable and filterable activity history

Per-automation and per-device run history

Patch logs with copied or downloaded output

Read-only and read-write API keys

Multiple independently revocable API keys

API access to devices, groups, automations, and tags

Trigger automations through the API

Custom dashboards and reporting integrations

Outbound event webhooks

HMAC-signed webhook requests

Webhook delivery logs, retries, and manual reruns

Top-level client groups

Client location and device-type subgroups

Group-scoped technician access

Group-scoped updates, alerts, reports, and inventory

Group-level custom field defaults

Inherited remote control security settings

Client-specific automations and monitor targeting through tags

PSA client mapping, device sync, and ticket routing

Cloud-hosted, browser-based management console

Lightweight Windows agent

Lightweight macOS agent

Lightweight Linux agent

One-line command installation

Mass deployment from an existing RMM, MDM, or script runner

Optional group assignment during installation

No inbound VPN requirement

Automatic agent enrollment after installation