Connectors / Fleet
What Deixic does with Fleet.
Read and act
Review hosts and policies and help lock a departed employee’s host.
How Deixic helps with Fleet.
- Read information
- Review audit activities, hosts and policies from Fleet as evidence and to check state.
- Choose the actions
- Deixic supports actions on hosts. Grant only the tools and permissions the task needs.
- Keep your decisions
- Deixic checks your policy before a change; sensitive changes wait for a named approver. The action record keeps the decision and result.
1 of 1 changing operations require approval. See how approvals work.
Example workflow
List the hosts that fail a device policy
Read the Fleetdm hosts and policies. List hosts failing a disk encryption or screen lock policy, with the host and the owner, and the audit activity for the last change.
- Read the policies and the hosts, and group the hosts by policy result. Keep the host identifier and the owner with each failure.
- Match each owner to the HR system so departed people with a managed laptop appear in the offboarding list (CC6.2).
- For a departed employee’s host, prepare a host lock for approval. Send the command after approval and read the host again; keep verification open while the device is offline. Other policy fixes go to the device-management owner.
Check before you continue: This connection reads hosts, policies, and audit activity. Policy results reflect the last check-in, so an offline laptop shows its last result, not its current state.
Provider reference: Fleet REST API
Use your existing agent with Deixic. Calls you route through Deixic follow your access and approval policy.
Provider access
Supported Fleet reads and actions.
Choose the reads and actions your task needs. Your connection’s permissions and your agent’s access determine what it can use.
Read data
- Audit Activities Read
- Hosts Read
- Policies Read
Actions
- Hosts Write
Permissions
Choose the access for Fleet.
Use a token issued for the account the agent should work in, check its owner, expiry, and resource access, and remember that replacing an expired token does not change the account’s permissions.
Find Fleet in the appManage connected accounts
- Connection
- Bearer token
- Supported operations
- Read and act
- Reads
- 3
- Actions
- 1
- Provider permissions
- Grant only the permissions needed for the task.
What you need to connect
- Fleet server hostname
- Fleet API token
Deixic checks calls routed through its gateway and requests approval when your policy requires it.
Reference and troubleshooting
Connectors for related work
Tell us what you need from Fleet.
Bring one task. We’ll show you the access it needs and how Deixic helps.
Request early access