Multi-Tenant Network Governance &
Delegated RBAC Administration

Unified Multi-Vendor Customer Fleet Inventory

Unify heterogeneous network infrastructure across MikroTik, Cisco, and Linux into a single management pane.

• ✓ Comprehensive Hardware Tracking: Manage credentials, IP/MAC addresses, firmware versions, and uptime across client fleets.
• ✓ Bulk Operations: Execute mass reboots, credential rotations, and firmware upgrades across accounts in one click.

RouterOS RBAC Profiles & Group Linking

Surgically delegate router administrative access using permission profiles built on the 19 RouterOS user policies.

• ✓ Exact RouterOS Scopes: Configure custom profiles across read, write, policy, test, password, sniff, sensitive, reboot, and 9 other scopes.
• ✓ User Group Synchronization: Synchronize access permissions directly with native RouterOS user groups.

Kernel-Level Command Interception & Guardrails

Prevent catastrophic human errors by intercepting and blocking dangerous CLI commands at the kernel and token level.

• ✓ Dual-Tier Interception: Linux ptrace/seccomp system-call hooks block prohibited execve binaries before execution.
• ✓ Real-Time Policy Enforcement: Enforce real-time Allow, Warn, and Deny rules on commands like system reset-configuration.

Golden Master Configuration Cloner & Sync

Maintain 100% configuration consistency across branch offices by replicating Golden Master baselines.

• ✓ Modular Synchronization: Selectively sync firewall rules, IP pools, routing tables, and policies to client fleets.
• ✓ Identity Exclusions: Replicate configurations without overwriting device-unique IPs, MACs, or hostnames.

Automated Task Planner with Visual Cron Builder

Automate routine network maintenance with a visual cron scheduler built specifically for router fleets.

• ✓ Visual Cron Expression Builder: Schedule hourly, daily, weekly, or custom maintenance routines easily.
• ✓ Multi-Step Sequences: Automate nightly backups, fleet-wide firmware updates, and script sequences across device groups.

Browser RDP & VNC for Customer Servers, One PAM for Network and Server Access

Privileged access management (PAM) for network devices and servers in one platform. Customer Windows and Linux servers now sit next to their routers and switches in the same Connection Manager, with the same policies and recordings. PAM works with any Windows or Linux host, no MikroTik required.

• ✓ Clientless RDP & VNC in the Browser (Pro): HTML5 desktop sessions next to SSH, Telnet and WebFig, nothing to install for your technicians. Every session is recorded and replayable. Requires the Terminal Gateway addon v1.3.0.
• ✓ RemoteApp Publishing (Pro): Publish single applications from a customer's RDP host as child entries nested under the server, inheriting its IP.
• ✓ NATed Multi-Endpoint Devices (Free & Pro): Several hosts behind one customer public IP on different ports, each managed as its own device, with badges showing the real port (e.g. RDP:3390).
• ✓ Workspace Modes (Free & Pro): Switch between MikroTik, PAM or All to tailor navigation, device tabs and actions to the job in hand.

Read the MikroWizard 2.1.0 release notes →