https://github.com/osquery/osquery logo
Title
s

Seán O'Halloran

08/26/2020, 4:56 PM
Does anyone know if there is a way to implement an approval process for ad-hoc queries?
n

nyanshak

08/26/2020, 6:40 PM
Fleet doesn't have permission granularity at that level (though I would like it to have that... def a feature request).
But there is a way to disable ad-hoc queries
visit
$fleetURL/admin/settings
under Advanced Options, hit 'Disable Live'
s

Seán O'Halloran

08/26/2020, 6:41 PM
Ooh thanks!
n

nyanshak

08/26/2020, 6:42 PM
Added in 2.5.0 release (disable functionality switch)