Skip to main content
Two sets of switches decide what agents may do on your computer:
  • Your organization’s Desktop policy sets the most that is allowed. An admin sets it for the whole organization and per group.
  • Your own switches, in Settings > Shell & files and Computer control, can turn any of that off for this computer. They never allow more than the policy.
What agents can do is what both allow. On top of that, the first use of the shell, file writes, the browser or computer control in a conversation still asks you (see the shell, browser control and computer control).

​
Your switches

Everything starts on. Settings > Shell & files has: Folders that may be trusted shows your organization’s folder rules: Any folder, the folders it allows, or None. You cannot change it. Settings > Computer control has the Computer control switch and the macOS permissions it needs. See Computer control.
Shell and files settings: Files set to Read and write, switches for Shell commands, Shell network, App automation, Move work to the cloud, Bring work back to this Mac and the two Prefer this Mac switches, Folders that may be trusted reading Any folder, and Browser control reading Not allowed

Settings > Shell & files, with browser control turned off by the organization. Shown with sample data.

​
When your organization does not allow something

A switch your organization’s policy turns off is replaced by Not allowed, with Your organization does not allow this. You cannot turn it on from the app; ask an admin. When your organization turns Omni Desktop off for you, the menu bar icon reads Turned off by your organization and the sidebar shows Mac turned off. Agents cannot reach this computer until an admin turns it back on. Policy changes reach your computer while the app runs. Nothing needs a restart.

​
Prefer this computer or the cloud

Agents also have a workspace and a browser in the cloud. Two switches in Shell & files decide where they work first, in conversations you start from the app: Turn one off when you want agents to keep working after you close the lid, or to keep work off your computer unless you ask for it.