Device Security & Compliance
Every Admiral device reports its platform security posture: whether it has a TPM, whether Secure Boot is on, whether its data disk is encrypted, and whether its disk recovery key is safely escrowed in Admiral Cloud. Fleets can then declare which of those they require, and Admiral shows every device that falls short.
Account Security & Audit
Admiral provides enterprise-grade authentication, FIDO2/WebAuthn Passkey support, and comprehensive organizational audit logging.
Roles & Permissions
A role is a named set of capabilities. You give people, groups and service accounts one or more roles, and each assignment applies at a scope: the whole organisation, one fleet, one device, or one configuration. The customer roles and capabilities below cover workload and fleet operations. You can also build custom roles. Host/root SSH is reserved for Admiral platform administrators, not customer remote access; use Open workload terminal for workload access.
Users, Groups & Access
This page covers inviting members, organising them into groups, and how access cascades through the resource hierarchy. Access is granted with Roles & Permissions. Advanced automation can also use low-level IAM policies, described at the end of this page. To see what an identity can do, use the Access Explorer.
Access Explorer
The Access Explorer is an auditing tool for answering two questions: