> For the complete documentation index, see [llms.txt](https://docs.keeper.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.keeper.io/release-notes/enterprise/admin-console/admin-console-17.11.4.md).

# Admin Console 17.11.4

Released November 9, 2026

## Overview

Admin Console 17.11.4 delivers updates to enterprise administrative workflows, expanded Role Enforcement Policy controls, and reporting enhancements, alongside targeted bug fixes for user provisioning, and node tree navigation.

## New Features

### Moving Roles and Teams Between Nodes

You can now move every user in a Role or Team to a different node in one step. Open the Roles or Teams options menu and choose **Move Role** or **Move Team** and select the target Node. A confirmation prompt appears before anything changes, and a toast notification confirms when the move is complete.

<figure><img src="https://1549319098-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LSGErxSfzX6xZALob42%2Fuploads%2F7VZfvFkg4A3g9RXgCRWJ%2FGroup%2036155.png?alt=media&amp;token=7e36bf5d-c06a-4855-aa41-910f0a35f4f2" alt=""><figcaption><p>Updated Options Menu for Node Movement</p></figcaption></figure>

<figure><img src="https://1549319098-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LSGErxSfzX6xZALob42%2Fuploads%2F7QE9kXrWFGycYu8O0vMD%2FGroup%2036157.png?alt=media&amp;token=58322b80-d6e6-450f-9697-a877a70e5faf" alt=""><figcaption><p>Move All Users to New Role</p></figcaption></figure>

### Advanced Reporting & Alerts Module (ARAM) Device Type Categorization

Added categorized Device Type filtering to Reporting & Alerts. This enables administrators to audit and track the exact client platforms, developer SDKs, and administrative tools used by end users for enhanced reporting. Supported device categories include:

* Mobile: Android, iOS, BlackBerry, Legacy Microsoft
* Desktop: Desktop App, Mac App, Mac App (Electron)
* Web Vault: Web App
* Browser Extension: Standard Extension, Edge, IE, ConnectWise
* Admin Tools: Commander, Bridge, Server, Lambda, SSO Connect, SCIM, Enterprise Client Tool, Support Tool
* Console: Enterprise Management Console
* KeeperChat: Desktop (Windows, macOS) and Mobile (iOS, Android) clients
* Secrets Manager: SDK integrations for JS, Python, Go, Java, .NET, Rust, and Ruby
* Other: EPM Agent, Password Importer, JavaScript SDK, and Unknown clients

<figure><img src="https://1549319098-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LSGErxSfzX6xZALob42%2Fuploads%2FkPr9Nz1y0mrPNozVxvqG%2FGroup%2036156.png?alt=media&amp;token=b1e556e5-1fd5-4751-a3c7-8dbd24d1db3f" alt=""><figcaption><p>ARAM Device Types</p></figcaption></figure>

## Improvements & Bug Fixes

* EM-8838: Added a new record type for Property Files.
* EM-8539: Improved the Clipboard Expiration Enforcement Policy to include a disable setting.
* EM-7681: Added a new Enforcement Policy to restrict the use of Keeper Forcefield on Desktop applications.
* EM-6892: Added clickable roles, teams, and nodes on the Admin page.
* EM-6892: Resolved an issue where administrative role permissions failed to refresh immediately following a bulk update.
* EM-9077: Fixed an issue where pending user invitations were incorrectly marked as active before vault acceptance.
* EM-9096: Resolved a visual glitch in the node tree navigation panel where child nodes appeared misaligned.
* EM-9113: Corrected an issue where SCIM-provisioned team memberships did not display immediately in the Teams tab.
* EM-9117: Fixed an error preventing administrators from editing certain security policy exceptions across sub-nodes.
* EM-9150: Resolved an issue causing inconsistent timestamp formatting in exported administrative audit logs.
* EM-9152: Fixed an issue where the "Stay Logged In" session setting failed to save across specific browser environments.
* EM-9160: Corrected an issue preventing invitation re-send actions for locked or suspended accounts.
* EM-9169: Resolved a layout misalignment in the KeeperPAM configuration modal.
* EM-9196: Fixed an issue where custom role descriptions were truncated when exceeding character limits without an error alert.
* EM-9197: Corrected tooltip positioning and text clipping on policy toggle switches.
* EM-9198: Resolved a bug causing user status filters to reset when navigating between reporting tabs.
* EM-9202: Fixed an issue where the BreachWatch summary card failed to load for newly provisioned Managed Companies.
* EM-9204: Resolved an issue where role policy modifications did not trigger real-time ARAM audit log events.
* EM-9219: Fixed an issue in Government Cloud environments where compliance dashboard scores failed to calculate correctly.
* EM-9231: Resolved table header overlap issues when resizing the browser window in Recent Activity reporting.
* EM-9233: Fixed an issue where deselecting all event types did not properly reset report filters.
* EM-9234: Corrected an issue where MSP administrators could not download compliance reports for specific child tenants.
* EM-9235: Fixed an issue where PAM session recording playback links displayed broken URLs in audit logs.
* EM-9238: Resolved an issue preventing administrators from saving changes to SSO cloud configurations after token renewal.
* EM-9245: Corrected an error message when uploading custom bulk provisioning CSV files.
* EM-9247: Resolved an issue where enterprise enforcement banner notices persisted after policy acknowledgement.
* EM-9248: Fixed an issue causing delayed load times on large team membership rosters.
* EM-9275: Resolved an issue where search terms were cleared unexpectedly when switching between node tabs.
* EM-9276: Fixed layout spacing and alignment issues on mobile and tablet viewport widths.
* EM-9282: Corrected an issue where Endpoint Privilege Manager deployment tokens displayed invalid expiration dates.
* EM-9284: Fixed an issue where deleting a pending team invite generated a generic error prompt.
* EM-9286: Resolved an issue where EPM policy sorting reset after navigating away from the page.
* EM-9292: Fixed missing confirmation dialogs when removing enterprise administrative roles.
* EM-9301: Fixed an issue causing slow response times when loading the Integrations hub under high concurrency.
* EM-9306: Resolved an issue where role enforcement toggles appeared disabled for administrators with full edit permissions.
* EM-9322: Resolved an issue where session termination alerts were not logged in Recent Activity.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.keeper.io/release-notes/enterprise/admin-console/admin-console-17.11.4.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.