Navigation
20.15. Datto RMM Integration: Sync Sites and Devices and Ingest Alerts
Connect Datto RMM to AlgaPSA with an API key and secret, map Datto sites to clients, sync devices into assets, and turn Datto alerts into routed tickets by polling, with an optional webhook for faster delivery.
Datto RMM organizes devices into sites. This integration maps each Datto site to an AlgaPSA client, syncs the devices in mapped sites into Assets, and turns Datto alerts into routed tickets. Alerts arrive by polling, and you can add a webhook if you want them in seconds. Technicians can also open Datto's Web Remote and reboot a device from the asset page. Datto RMM is an Enterprise Edition integration.
For the model all RMM integrations share, see How RMM Integrations Work in AlgaPSA. For alert rules, maintenance windows, and polling, see Turn RMM Alerts into Tickets.
Prerequisites
- A Datto RMM account with permission to create an API user.
- The region (platform) you sign in to. Look at the address you use for Datto RMM. For example,
https://merlot.rmm.datto.comis Merlot. - A dedicated Datto API user for AlgaPSA. In Datto RMM, open that user and generate its API key and secret. Give its security level read access to the account, sites, devices, alerts, and audit data.
- Write access on that API user only if you want to use the optional Resolve the Datto alert when its ticket closes setting or the reboot action. A read-only API user works for everything else.
Connect AlgaPSA to Datto RMM
Datto RMM is listed on the RMM tab with the other RMM providers. Until you connect it, it shows Not connected.
Figure 1: Datto RMM on the RMM tab. Select it to open its configuration panel.
- Navigate to Settings > General in the sidebar to open Admin Settings, then select Integrations (under Data & Integration), open the RMM tab, and select Datto RMM.
- Choose your Platform. The list shows Datto's regions (Pinotage, Merlot, Concord, Vidal, Zinfandel, and Syrah), each with its API host. Choose Custom URL only if you need a different API host, then enter it in API URL. A trailing
/apiis added for you. - Enter the API key and API secret from your Datto API user. The eye icons show or hide what you type.
- Click Save. AlgaPSA tells you to run Test Connection to activate the configuration.
- Click Test Connection. A successful test shows the Datto account name with the number of sites and devices, and marks the integration Connected.
Figure 2: The Datto RMM panel before you connect. Save becomes available once you enter both the API key and the API secret, and Test Connection once they are saved.
The status panel at the top shows the API URL, Mapped Sites, Synced Devices, Active Alerts, and Last Sync. If the last sync failed, a Last error line appears below it.
Saved credentials show masked. Leave the fields empty to keep them. If you change the Platform or API URL, you must enter the API key and API secret again before you can save. This stops stored credentials from being sent to a new host.
Custom API URLs must be https and on a Datto host (*.centrastage.net or *.rmm.datto.com).
Map Datto sites to clients
- Click Sync Sites in the Sites section. AlgaPSA imports your Datto sites into the Site Mapping table. Each row shows the Datto Site with its Datto ID.
- Assign each site to an AlgaPSA client in the Alga Client column. If a client's name matches the site name (or the site's Autotask company name), the row shows a Suggested client. Suggestions are never applied for you. Pick the client yourself, or use Create client on the row to create one named after the site.
- Create clients in bulk with Create clients for unmapped. The button shows how many sites it will cover. Each unmapped site gets a client named after it and is mapped to it. A site whose name matches an existing client is linked to that client instead.
- Set a Default Contact if you want one. This is the contact attached to tickets created by alerts from this site.
- Turn on Auto-sync for each site whose devices you want in Assets.
The table also has a People setting (Off, Suggest, or Auto-assign) that controls how AlgaPSA matches signed-in users on a site's devices to contacts, and a Billing profile column. The Signed-in users for site panel below the table lets you review those matches for one mapped site.
Two badges can appear on a site:
| Badge | Meaning |
|---|---|
| On-demand | Datto marks the site as on-demand. New on-demand sites start with Auto-sync off. |
| Not in Datto | The site no longer appears in Datto. AlgaPSA keeps the mapping and does not call Datto for it. The badge clears if the site comes back. |
Syncing sites again refreshes site names and details. It never changes the client, Auto-sync, or contact you chose.
Create clients for new sites automatically
Turn on Create clients for new sites automatically in the Sites section if you want new Datto sites to get clients without a manual step. Sites are refreshed before every scheduled device sync. When the setting is on, a site seen for the first time gets a client named after it, or is linked to the client that already has that name. Sites that are already unmapped and on-demand sites are left alone. Turning this on requires permission to create clients.
Sync devices
- Click Sync Devices in the Devices section. Datto devices in mapped sites with Auto-sync on become AlgaPSA assets.
- Check the result. A successful run reports how many devices were processed, created, updated, and failed.
A site is skipped if it has no client or Auto-sync is off. Map first, then sync.
The manual Sync Devices button always runs a full sync.
Software inventory
- Ingest Software reads Datto's software audit and records the software installed on synced assets.
- Ingest software during device sync does the same as part of every device sync. It reads the software audit of each changed device, so it adds one extra Datto API call per changed device. That can be slow on large accounts.
Schedule device sync
In the Scheduled device sync section:
- Turn on Sync devices on a schedule.
- Set Run every (minutes) to a whole number from 15 to 1440. The default is 60.
- Click Save sync schedule. The scheduler applies it within a few minutes.
Scheduled runs are incremental, so they only touch devices that changed. The section shows the last scheduled run, the last sync of any kind, and the error if the last sync failed. A shorter interval keeps data fresher and uses more Datto API calls.
Alerts and tickets
Alerts come in through polling. A webhook is an optional faster path.
Polling
In the Alert Automation section, Alert Polling has a Polling enabled switch and an Interval of 5 to 60 minutes. AlgaPSA checks Datto for open alerts and runs new ones through your alert rules. Last polled shows the most recent run. Polling also notices alerts that have cleared in Datto and closes their untouched tickets.
Click Sync Alerts in the Alerts section to pull open Datto alerts right now. Use it after setup, or any time you think an alert was missed. Only alerts from mapped sites are processed.
Alert rules and priority
Alert rules decide which alerts become tickets, which board they land on, and who is notified. Rules and maintenance windows work the same for every RMM. See Turn RMM Alerts into Tickets.
Datto alert priority maps to AlgaPSA severity like this:
| Datto priority | AlgaPSA severity |
|---|---|
| Critical | Critical |
| High | Major |
| Moderate | Moderate |
| Low | Minor |
| Information, Unknown, or missing | None |
Resolve the Datto alert when a ticket closes
Turn on Resolve the Datto alert when its ticket closes if you want closing the ticket to resolve the alert in Datto. This needs a Datto API user with write access to alerts. Leave it off for a read-only API user.
With it off, a ticket closed while its alert is still open in Datto can be followed by a new ticket on the next poll. Resolve the alert in Datto, or turn the setting on, to avoid that.
Webhook (optional fast path)
Polling is the guaranteed path. To get alerts in seconds, add a webhook response action to your Datto monitor policies. The Webhook (optional fast path) section gives you everything to paste:
| Field | What it is |
|---|---|
| Webhook URL | The AlgaPSA endpoint Datto posts alerts to. |
| Custom Header Name | X-Alga-Webhook-Secret. The header Datto must send. |
| Header Secret | The shared secret. Use Copy; the eye icon reveals it. |
| Body Template (alert triggered) | The JSON body for the triggered webhook. |
| Body Template (alert resolved) | The JSON body for the optional resolved webhook. |
In Datto, add a webhook response to your monitors using the URL, header, and body template. Alerts from sites that are not mapped are not recorded.
Regenerate secret creates a new header secret. The old one stops working immediately and webhook alerts are rejected until every Datto webhook sends the new value. Polling is not affected.
If you cannot see the webhook fields, you need permission to update settings.
Reboot and Web Remote from an asset
- Web Remote. For a synced Datto device, the asset's Remote Access menu offers Remote Desktop. It opens the device's Datto Web Remote session in your browser.
- Reboot. In Asset actions, choose a Reboot component and click Save. Technicians can then use Reboot Device on the asset. AlgaPSA runs the component on the device as a quick job. This needs a Datto API user with write access. If the component list cannot load, paste the component's UID instead. Leave the field empty to turn the reboot action off.
Disconnect
Click Disconnect and confirm. AlgaPSA removes the stored API key and secret, resets the webhook secret, and stops scheduled syncs. Site mappings and synced assets are kept. To connect again, enter the API key and secret and run Test Connection.
Operational checks
- The status panel shows Connected with a recent Last Sync.
- Mapped Sites matches the number of sites you expect, and the sites you want have Auto-sync on.
- After Sync Devices, spot-check one client's asset list.
- Create a test alert in Datto and confirm a ticket appears on the board your rule chooses, within one polling interval (or within seconds if the webhook is set up).
Troubleshooting
| Message | Cause | Fix |
|---|---|---|
Datto RMM rejected the API key and secret. Check the API key, API secret, and platform region, then try again. | Wrong key, secret, or region | Re-enter the credentials and confirm the Platform matches the region you sign in to |
The Datto API user's security level does not have access to ... Grant the user read access to the account, sites, devices, and alerts, then try again. | The API user's security level is too narrow | Give the Datto API user read access to the account, sites, devices, alerts, and audit data |
The Datto RMM platform or URL changed. Re-enter the API key and API secret to confirm the new location. | You changed the Platform or API URL without re-entering credentials | Enter the API key and API secret again, then save |
Datto RMM API URL must be an https URL on a Datto host (*.centrastage.net or *.rmm.datto.com) | The custom API URL is not an allowed Datto host | Use the https API host shown for your region |
Datto RMM needs to be reconnected: ... | Datto rejected the stored credentials | Re-enter the API key and secret and run Test Connection |
Datto RMM is rate limiting requests for this account. Try again shortly. | Datto's rate limit was reached | Wait and retry. Use a longer sync interval on large accounts |
Datto RMM is not configured yet. Save the platform, API key, and API secret first. | You clicked Test Connection before saving | Save the configuration first |
No sites found. Run "Sync Sites" first. | The Site Mapping table is empty | Click Sync Sites |
Configure a reboot component in Datto RMM settings before rebooting from Alga. | No reboot component is saved | Choose a component under Asset actions and save |
Datto RMM refused to resolve the alert: the Datto API user needs write rights (resolve alerts). | Resolve the Datto alert when its ticket closes is on, but the API user is read-only | Give the API user write access to alerts, or turn the setting off |
If devices do not appear after a sync, check that the site has a client and Auto-sync on, and that it does not show Not in Datto.
Related topics
- How RMM Integrations Work in AlgaPSA: the shared model behind every provider
- Turn RMM Alerts into Tickets: alert rules, maintenance windows, and polling
