If you need to lock down a workspace to prevent the addition of new users or devices for security reasons, you can do so by setting "Dynamic creation of users" to NO. This prevents new devices from registering with the SASE CyberMesh, causing the agent installation on any such device to fail as it will not be allowed to join the workspace.
To restrict users to one device per OS/platform, adjust the "Limit to One Device per OS/Platform" setting. For instance, if a user already has a Windows device connected to the SASE CyberMesh, and another Windows device attempts to connect under the same username, the SASE CyberMesh will prevent the second device from joining the workspace.
For expert guidance on implementing SASE, XDR, IAM, and GRC solutions, reach out to Exium at partners@exium.net. If you are ready to get started, check out our testing and onboarding process.