Fleet (FleetDM)

What it covers

Device posture from osquery: host inventory and disk encryption across macOS, Windows, and Linux - no commercial MDM required.

Credential to create

Fleet API-only user token

Create an API-only user

Permissions to grant

• Observer role (read-only) is sufficient - it reads host and disk-encryption summaries

Setup steps

1. Deploy the fleetd agent to your macOS / Windows / Linux devices so they enroll and report posture (this is Fleet's osquery agent - it is what gives you device evidence without a commercial MDM).
2. In Fleet, create an API-only user with the Observer role, then generate its API token.
3. On the Integrations page, enter your Fleet server URL (for example https://fleet.yourco.com) and paste the token.

Notes and gotchas

• Turn on disk-encryption enforcement in Fleet (Controls > OS settings > Disk encryption) so the disk-encryption summary is populated; without it that control reports no data.
• Fleet is the lightweight path to device evidence for tenants with no Jamf or Intune. Fleet operates the agent; Joopler reads its API read-only.