Welcome to our comprehensive guide for administrators. This guide is made for TeamViewer license administrators who have recently acquired a multi-user TeamViewer license (Premium, Corporate, or Tensor). In this guide, we outline our recommended best practices for optimally configuring your TeamViewer environment. While there are various ways to set up TeamViewer, the methods described here reflect some best practices acquired by our Professional Service teams.
If you are interested in our Professional Services, you can find an overview in the Documents section at https://compliance.teamviewer.com/.
Please find below general information about TeamViewer solutions and their capabilities.
To successfully deploy and configure TeamViewer within your environment, please make sure that your network allows TeamViewer websites and services.
Learn more here: Network addresses and ports used by TeamViewer
Note: If you are a Tensor license holder and purchased the Conditional Access add-on, please make sure to set up your network environment, as described here:
Best practices for network configuration in a Conditional Access environment
Activating the license is a crucial step for a successful TeamViewer onboarding.
Please click the link below and follow the activation guide corresponding to your TeamViewer license:
Note: When migrating licenses from other TeamViewer versions (e.g.: Business, Corporate) during working hours, make sure you quickly reassign the new licenses to agents, to avoid operational interruptions.
Once you have activated your account, you can find detailed information about the TeamViewer account here: Account
The web app is the new central platform for managing your devices, users, and company profile, essentially containing all administrative functions.
You can also make outgoing connections from the web app.
You can access the web app via this link:
Learn how to sign into your account here: Sign in with your account
If you are using the (Classic) interface, you'll have to use the Management Console to manage your devices and your users. You can access the Management Console via this link: https://login.teamviewer.com/
Learn how to create your company here:
Learn how to manage your users here:
To learn how to automatically provision your company with users and user groups from your Identity Provider (IdP), please go to the chapter below:
Automate users and groups (SCIM) provisioning via connectors
Please find our best practices on how to use TeamViewer securely within your environment here:
User roles define what TeamViewer-related services each supporter (user) is allowed to view, edit, and control. Learn how to create roles here:
Policies offer the ability to apply settings on your installed TeamViewer full or TeamViewer Hosts clients, allowing granular control over which configuration settings are applied to specific groups of devices.
Learn how to improve security via TeamViewer policies here:
Furthermore, you'll find the list of all settings policies as well as our best practices on how which settings to choose for our policies here:
Best practices for settings policies
Note: TeamViewer policies can be assigned to devices and device groups.
Now you have set up your TeamViewer policies, you can create device groups and assign your TeamViewer policies to those groups. Learn how to create a device group.
For more information about device groups, please read this article.
Incoming and outgoing connections from users within your company and to your managed devices can be logged in the Admin settings within Connection reports.
Learn more here: Connection reports
On top of this, you can also use the Auditability feature (only available for TeamViewer Tensor), which provides complete visibility into user activity, records remote sessions, and sets user policies, ensuring accountability and compliance with security protocols and internal requirements.
Learn more here: Auditability / Event Log
Note: Supporters who are authorized to view event logs should have the View event logs role permission added, as it is not enabled by default.
TeamViewer Conditional Access is a security solution that allows you to granularly control which source users, user groups, and devices using TeamViewer Tensor have access to which TeamViewer clients in your organization.
Learn more here: TeamViewer Conditional Access
With Single Sign-On, reduce user management efforts for large companies by connecting TeamViewer with identity providers and user directories, thereby enhancing control over provisioning enterprise user accounts and improving security by centralizing password control.
Please learn more here: Single Sign-On (SSO)
Notes:
Once SSO is enabled for the e-mail domain, all accounts associated with that e-mail domain will be redirected to the SSO, regardless of whether they belong to your company profile or not. You can apply granular exclusions if needed (only supporter accounts are added).
With SCIM (System for Cross-domain Identity Management), it is possible to synchronize users and user groups from many different Identity Providers (IdP), such as Okta and Microsoft Entra ID (formerly Azure Active Directory) to TeamViewer
Learn how to proceed here:
Notes:
Enhance security by requiring users to use multi-factor authentication when signing in to their TeamViewer account and thereby reducing the risk of unauthorized access.
Learn more here: Two-factor authentication for your account
Hint: You also can enforce two-factor authentication for all your company users when they sign in to TeamViewer.
Learn more here: Enforce two-factor authentication for your company members
Provide attended remote support via session codes
Learn how to provide attended remote support here:
Provide attended remote support
To go beyond, you can use the Service Queue feature, allowing your team to manage spontaneous customer support requests, each represented as a service case, and enabling individual team members to address these cases via TeamViewer.
Learn more here: Service Queue
Enhance your TeamViewer experience with our licensed add-ons.
Remote Management
Get Started with TeamViewer Remote Management
Monitoring & Asset Management (Classic)
Service Desk
Enhance support request management with Service Desk.
Learn more here: Service Desk
Workflow and Automation
Discover AI-powered functionalities to streamline workflows and processes.
Learn more here:
Rule-based task automation (Monitoring add-on required)
Generate session summaries with Session Insights
Co-browsing
Bring TeamViewer into your Microsoft Teams experience to facilitate remote control, assistance, device sharing, and session monitoring for supporters and end users.
Learn more here: Microsoft Teams Integration - Installation and User Guide
Please find here all integration user guides for the platforms we support:
TeamViewer's web-based API enables data access, account control, and the development of apps integrating TeamViewer functionality for both corporate and public use.
Please find all our documentation regarding REST APIs here:
GitHub - teamviewer/api-example-scripts: TeamViewer Web API example scripts
With the TeamViewer Mobile Software Development Kit (SDK) you can integrate TeamViewer remote access and remote control functionalities into your mobile apps to optimize your company's customer support services.
Learn more here: TeamViewer Mobile Software Development Kit (SDK)
To deploy TeamViewer clients within your environment, please follow this user guide:
Note: The user performing the rollout setup will be designated as the device manager (owner). Device managers have the authority to configure all settings related to a specific device, including tasks such as moving the device between device groups and unassigning devices. This ownership is established during the assignment process (and can also be added afterward). Therefore, we recommend assigning multiple users as the device manager (owner).
You can mass deploy TeamViewer clients via MDM tools such as Microsoft Endpoint Manager (InTune), JAMF Pro, IBM Maas360 and many others.
Microsoft Endpoint Manager (InTune)
Deploy TeamViewer on device groups via Microsoft Endpoint Manager
Intune Integration - Installation and User Guide
JAMF Pro
TeamViewer Integration - Jamf Pro Documentation
GitHub - jamf/PPPC-Utility: Privacy Preferences Policy Control (PPPC) Utility
Note: If the device is not appearing in your devices list, it might could be because the assignment command in the script runs before the TeamViewer client establishes a connection to the TeamViewer cloud. This issue can occur if your firewall blocks outgoing traffic to TeamViewer routers. To address this, consider adding or increasing the wait time in the mass deployment script.
TeamViewer Mobile Device Support allows you to connect to mobile devices.
Please learn more here:
Remote control an Android device via attended access
Remote control an Android device via unattended access
Share the screen on your iPad/iPhone
You can also configure apps via your Mobile Device Management tool.
Learn more here:
Join the conversation in our TeamViewer Community!
Thousands of TeamViewer enthusiasts share solutions, tips, and tricks and help each other every day.
TeamViewer maintains a status page to keep you updated about its system’s availability. You can visit this page to check if there are any service interruptions or other issues: TeamViewer Status
To contact our Customer Support, please click this link:
Scroll down and click Submit a request.
Alternatively, you can also call us at the number corresponding to your location.
SLA Contracts
TeamViewer Tensor SLA is designed with large companies that operate across the globe in mind and beyond normal business hours. The main purpose of SLA is twofold to provide support to TeamViewer Tensor customers:
If you have already subscribed to an SLA contract, the people indicated in it can open requests in the informed exclusive support channels.
For general information about SLA contracts, please click here.
If you are interested in an SLA contract, please contact our Sales team.
Customer Success Management
If you have already subscribed to a CSM, please reach out via the indicated contacts for further information.
If you are interested in getting an assigned CSM, please contact our Sales team.