Skip to main content
This guide walks you through connecting your Datto RMM instance to MSPortal.ai. You generate API keys in Datto RMM, then work through the tasks on the Datto RMM connection page to choose data, match sites to companies and import devices.

Overview

The Datto RMM integration syncs your sites, devices, and installed software into MSPortal, allowing you to:
  • Import and manage devices from Datto RMM
  • Map Datto sites to your MSPortal companies
  • Keep device inventory synchronized automatically
  • Track installed software on your Datto devices
  • View Datto devices in reports and compliance tracking

Prerequisites

Before you begin, ensure you have:
  • Active Datto RMM account with administrative access
  • MSPortal.ai account with integration management permissions
  • Companies already set up in MSPortal (from your PSA integration or manually created)
The Datto RMM integration maps sites to existing companies in MSPortal. Import your companies from your PSA integration first, or create them manually before setting up Datto RMM.

Part 1: Generate API Credentials in Datto RMM

Before connecting to MSPortal, you need to enable API access and generate API keys for a Datto RMM user.
1

Enable API Access

Log into your Datto RMM portal and go to Setup > Global Settings > Access Control. Turn on Enable API Access and save.
2

Open the API User

Go to Setup > Users and open the user MSPortal will connect as. We recommend a dedicated user for MSPortal.
3

Generate API Keys

In the user’s API Keys section, click Generate API Keys.
Copy the API URL, API Key and API Secret Key immediately after generating them. The Secret Key cannot be retrieved once you leave the page. Regenerating keys invalidates the previous pair.
4

Set the API Security Level

Beside the keys, choose the API Security Level and API Component Level. The security level decides what the keys can read. MSPortal needs a level that can view Global Settings, every Site and every Device in the account. Administrator, or a copy of it, works. Leave the component level unrestricted.Then click Save User. The keys do not work until the user is saved.
A level limited to selected sites still passes the connection test, because Datto accepts the keys. The site and device syncs then fail with “Authenticated user doesn’t have access to this resource”. The Permissions task in MSPortal catches this before the first sync.
5

Note Your Platform

Identify which Datto RMM platform your account uses. The platform name is the first part of the API URL you copied:

Part 2: Connect Datto RMM in MSPortal

The Datto RMM connection page lists its tasks in the Setup guide: Connect, Permissions, Choose data, Import or match companies, Import devices and Review. See Connect and manage integrations for the tasks every connection shares.

Connect

1

Open the connection page

In MSPortal, go to Settings > Integrations. On the Directory tab, find Datto RMM and click Connect. To manage an established setup, open the existing connection from your active integrations instead.
2

Select Your Platform

Choose your Datto RMM platform from the Platform dropdown: Pinotage, Merlot, Concord, Vidal, Zinfandel or Syrah.
If you’re unsure which platform you’re on, check the API URL from Part 1 or contact Datto support.
3

Enter API Credentials

Fill in the following fields:
4

Test the connection

Click Test connection to verify your credentials.If the connection fails:
  • Verify your API Key and Secret Key are copied correctly
  • Confirm you selected the correct platform
  • Check that your API key hasn’t expired or been regenerated
  • Ensure API access is enabled for your Datto account and the user was saved after generating keys
5

Save and continue

Once the connection test passes, click Save and continue. This saves the connection and moves to Permissions. A successful test alone does not save the connection.

Permissions

The connection test only proves that Datto RMM accepts the keys. Permissions checks what the keys may read, using the API user’s API Security Level.
1

Run the check

Click Run check. MSPortal reads one record from each area it syncs. Nothing changes in Datto RMM.
2

Review the results

Sites and Devices are required. Software inventory is recommended. A granted row shows Granted. A row that reads Not permitted shows the Datto permission to grant, for example Sites > Sites: View across the whole account.
3

Fix and re-check

In Datto RMM, open Setup > Users, open the API user, raise its API Security Level to one that covers the whole account, and click Save User. Back in MSPortal, click Re-check. Continue is held until both required rows are granted.
A sync whose permission is missing stays switched off in Choose data until the check passes. The same check is available later from Permissions in the Setup guide.

Choose data

Choose data lists the data categories Datto RMM supports: Companies (Datto sites), Devices, and Software. Each switch saves when you change it. Start the first sync when it is offered.
  • Turning a category off stops future synchronization for that category. Other disabled categories keep their existing data.
  • Turning Software off removes this integration’s installed software data. Turning it back on starts a new inventory sync.
  • Devices and software still use your saved site matches to decide which records appear.

Import or match companies

This task opens Import or match Datto RMM sites. Match your Datto RMM sites to MSPortal companies. Only devices from matched sites are available for import.
1

Wait for the first sync

After the connection is created, MSPortal begins syncing your sites from Datto RMM. This may take a few minutes depending on the number of sites. If no sites have synced yet, wait a few minutes and click Sync sites.
2

Review suggestions

Open Suggested to review proposed matches with their confidence scores, then click Accept on each correct one. Review N suggested matches opens Accept suggested matches, which lists every suggestion at 70% confidence or more with those at 90% or more already selected. Lower the Auto-select by confidence slider, as far as 70%, to select weaker suggestions too, untick any pair you want to check yourself, then select Apply N Matches.
3

Match the remaining sites

For sites that weren’t matched, choose the correct MSPortal company in the row. Each row shows the site’s device count. Each match saves immediately; wait for it to save and check the resulting link.
4

Import missing companies

If a company does not exist yet, click Import company in the site’s row to create it and match the site. Check for an existing company first to avoid duplicates.
5

Remove a match (optional)

To remove a saved match, use Remove match. Removing a saved match takes effect immediately.
You must match at least one site before importing devices. Devices from unmatched sites will not appear in the staged devices list.

Import devices

Import devices lets you map Datto device types to MSPortal device types and import devices from matched sites. Every change saves immediately. See Import Devices for selection, type mappings and result handling.

Match device types

1

Review discovered types

Match device types lists each Datto device type with its device count and the MSPortal device type it becomes when imported.
2

Map device types

Click Match all suggested to accept every suggested mapping, or Match the rest with AI for the remaining types. To map a type yourself, choose an MSPortal device type in its row.
3

Turn on Auto-import (optional)

Turn on Auto-import for device types you want imported automatically. New devices of these types are imported without manual intervention after each device sync. Auto-import requires a device type mapping.
4

Ignore a type (optional)

Click Ignore on device types you never want to import (e.g., printers, UPS devices, or sensors). Unimported devices of an ignored type are hidden from the staged devices list and pending import counts, and new devices of that type are ignored automatically. Restore the type at any time to bring its devices back.

Staged devices

Staged devices lists devices Datto RMM sent that are waiting to be imported. The table shows each device’s name, category and type, site, company, manufacturer, model, OS and status.
  1. Click Import all matched to import every device whose type is mapped, or check the devices you want and click Import n selected.
  2. To hide devices you never want to import, select them and click Ignore n selected.
  3. Check the import result and the resulting records on Devices.
The initial device sync may take an hour or two to complete. Subsequent syncs are faster.

Review and finish setup

Open Review and select Finish setup once the required tasks are complete. That does not mean every background sync or device import has finished.

What Gets Synced

How Device Details Update

Each device sync updates the hostname, OS, internal IP, model, serial number and last user on devices imported from Datto RMM. A value you edit in MSPortal for one of these fields is replaced by Datto’s value at the next sync, so make the correction in Datto RMM. When Datto sends a blank value, the device keeps its existing value. A device that another integration, such as your PSA, owns keeps that source’s values; Datto only fills in fields that are blank. The Datto Description appears in the device’s Datto RMM details and in the optional Description column on Devices, where you can filter and sort by it. It is also included in the Devices CSV export. See Find and export your devices.

Sync Schedule

You can trigger a manual sync at any time with Run sync in the connection header. A scheduled time does not guarantee a successful run; check Sync activity.

Managing Your Integration

Open the Datto RMM connection from Settings > Integrations to manage it:
  • Overview and Sync activity: Check connection status, matches and errors
  • Setup guide: Reopen any task to change data choices, re-match sites or import devices
  • Run sync: Trigger a fresh sync of sites, devices, or software
  • Disconnect…: Under More actions. Review the confirmation: disconnecting removes the stored credentials, site matches and synced data, and cannot be undone. It does not revoke the API keys in Datto RMM.

Rotating API Credentials

1

Open Connect

Go to Settings > Integrations, open the Datto RMM connection and select Connect. The Platform field is locked for an existing connection.
2

Enter the new keys

Enter the replacement API Key and Secret Key. Leave masked values unchanged to keep the stored keys.
3

Test the new keys

Click Test connection and wait for the success message.
4

Save the new keys

Click Save changes. Retesting alone does not save replacement keys.

Troubleshooting

Causes:
  • Incorrect API Key or Secret Key
  • Wrong platform selected
  • Expired or regenerated API credentials
  • API access not enabled, or the user was not saved after generating keys
Solutions:
  1. Verify your API Key and Secret Key are copied exactly (no extra spaces)
  2. Confirm you selected the platform that matches your API URL
  3. Generate new API keys for the user under Setup > Users if needed, and save the user
  4. Ensure Enable API Access is on under Setup > Global Settings > Access Control
Cause: the API user’s API Security Level does not cover the whole account. Datto accepts the keys but answers the account-wide site and device lists with “Authenticated user doesn’t have access to this resource”.Solution:
  1. In Datto RMM, open Setup > Users and open the API user
  2. Beside the API keys, choose an API Security Level that can view Global Settings and every site and device (Administrator, or a copy of it), and leave the API Component Level unrestricted
  3. Click Save User
  4. In MSPortal, open the Datto RMM connection, choose Permissions and click Re-check. If the connection was paused, click Reactivate.
Causes:
  • Initial sync still in progress
  • API user lacks access to the sites
Solutions:
  1. Wait a few minutes for the initial sync to complete
  2. Click Sync sites, or Run sync in the connection header
  3. Run Permissions to confirm the API user can read every site. Avoid creating repeated connections.
Check the result of the last matching action, then reopen Import or match companies to verify the saved state. Matches save when applied, so a failed save shows an error.
Causes:
  • No sites have been matched to companies
  • Device sync still in progress
  • Sites don’t have any devices
Solutions:
  1. Match at least one site to a company in Import or match companies
  2. Wait for the device sync to complete (can take 1-2 hours initially)
  3. Click Run sync to trigger a fresh sync
Causes:
  • Device type not mapped
  • Company match was removed
Solutions:
  1. Ensure all device types have an MSPortal device type
  2. Verify the site is still matched to a company
  3. Check for error messages in the import results
Causes:
  • Auto-import not turned on for the device type
  • Device type not mapped
  • Site not matched to a company
Solutions:
  1. Turn on Auto-import for the device type
  2. Ensure the device type is mapped to an MSPortal device type
  3. Verify the device’s site is matched to a company
Check the last successful sync in Sync activity, whether the connection is paused, and any connection errors.

Frequently asked questions

No. For a new connection, complete the successful test and then choose Save and continue. For an existing connection, choose Save changes.
No. Suggestions wait for your review. Accepting a suggestion saves its match immediately; removing a saved match also takes effect immediately.
No. Device discovery, saved matches and inventory imports have separate results. Check Import devices and the resulting inventory.

Best Practices

Match Sites First

Always match your Datto sites to companies before trying to import devices. Devices from unmatched sites won’t appear in staging.

Start with Suggestions

Review the suggested matches first, then match the remaining sites yourself. It saves significant time.

Turn on Auto-import

For device types you always want imported (like workstations), turn on Auto-import to reduce manual work.

Ignore Unwanted Types

Ignore device types you never manage (printers, sensors, etc.). This keeps your pending import counts clean and accurate.