---
title: "Unattended Screen Sharing Sessions and Personas"
slug: "una"
description: "Learn how to create custom roles and personas for unattended sessions in Tanium, enabling secure access to Windows endpoints without user permission."
updated: 2026-07-23T22:39:00Z
published: 2026-07-23T22:39:00Z
canonical: "docs.screenmeet.com/una"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.screenmeet.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Unattended Screen Sharing Sessions and Personas

### Overview

Unattended sessions let a Tanium Console operator connect to a Windows endpoint without endpoint user permission. This capability is intentionally restricted. This article describes the permissions involved and how to build a custom role and persona that grants unattended access to a defined set of endpoints and users.

---

### Prerequisites

- Authority in Tanium to create custom roles and personas under **Administration > Permissions**.
- Windows endpoints. Unattended connections to macOS endpoints are not supported.

No Default Role Grants Unattended Access

The default `Integration Admin - ScreenMeet`, `Screen Sharing Agent`, and `Integration Viewer - ScreenMeet` roles cannot establish unattended sessions. You must create a custom role.

---

### Permissions

| Permission | Effect |
| --- | --- |
| `Screen Sharing Support Session Unattended Execute` | Establish unattended sessions with Windows endpoints. The endpoint locks after the session by default. |
| `Screen Sharing Support Session Disable Autolock Execute` | Leave the endpoint unlocked after an unattended session. Requires the Unattended Execute permission. |

---

### Step 1: Create the Custom Role

1. From the Main menu, go to **Administration > Permissions > Roles** and click **New Role**.
2. Enter a **Role Name**, such as `Screen Sharing Unattended Role`.
3. Set **Permission Type** to `Allow`.
4. Select `Screen Sharing Support Session Unattended Execute`.
5. To allow operators to leave endpoints unlocked, also select `Screen Sharing Support Session Disable Autolock Execute`.
6. Click **Save**.

---

### Step 2: Create the Persona

1. From the Main menu, go to **Administration > Permissions > Personas** and click **New Persona**.
2. Enter a persona **Name**, such as `Screen Sharing Unattended Persona`.
3. Click **Manage Roles** and select `Interact Basic User` (for Interact access), `Screen Sharing Agent` (for screen sharing access), and your custom unattended role.
4. Click **Apply**. The Permissions table shows the union of permissions from these roles.

Persona Combines Roles

The persona must include a role that grants screen sharing (`Screen Sharing Agent`) and Interact access alongside the unattended role, so the operator can both find and connect to endpoints.

---

### Step 3: Scope the Persona

1. Expand **Computer Groups**, click **Manage Computer Groups**, select the groups containing the target endpoints, and click **Select**.
2. To scope by user group, expand **User Groups**, click **Manage User Groups**, select the group, and click **Select**.
3. To scope to individual users, expand **Users**, click **Manage Users**, select the users, and click **Select**.
4. Click **Save**.

Operators assigned this persona can establish unattended sessions with the scoped endpoints when the persona is active.

Scope Tightly

Restrict the persona to the smallest set of computer groups and users that need unattended access. This limits exposure if credentials are misused.

---

### Where This Is Configured

Roles and Personas in Tanium

Custom roles and personas are Tanium Console constructs. More information is surfaced in the Tanium documentation at [Tanium Direct Connect User Guide: Configure personas to establish unattended screen sharing sessions](https://help.tanium.com/bundle/ug_direct_connect_cloud/page/direct_connect/screen_share.html).

---