RMM: endpoint truth
Which devices exist? Are they online and healthy? What software, services, alerts, patches, scripts, sessions, and operational exceptions apply to each endpoint?
Vendor-neutral buying guide
Short answer: RMM centers on the device and the work performed on it. PSA centers on the customer request, agreement, technician effort, service obligation, and commercial result. MSPs often use both, but a bundle does not remove the need to define which system owns each record and what happens when synchronization fails.
Which devices exist? Are they online and healthy? What software, services, alerts, patches, scripts, sessions, and operational exceptions apply to each endpoint?
Which customer requested work? What agreement, SLA, queue, owner, time entry, project, approval, charge, invoice, and communication record governs it?
Which RMM condition should create or update a PSA record, how is it deduplicated and routed, and how does closure flow back without hiding unresolved endpoint state?
| Check | RMM evidence | PSA evidence | Integration evidence |
|---|---|---|---|
| 1. Primary record | Durable endpoint identity and current operational state. | Company, contact, request, agreement, owner, and work history. | Document the authoritative system and foreign key for every shared record. |
| 2. Monitoring and intake | Condition, threshold, confirmation, suppression, and recovery. | Email, portal, phone, alert, project, or scheduled-work intake. | Prove which confirmed conditions create tickets and which remain RMM-only. |
| 3. Routing | Customer, site, endpoint, policy, alert type, and severity. | Queue, issue, sub-issue, priority, work type, resource, and escalation. | Test defaults and unmapped values; do not assume new monitor types route safely. |
| 4. Service obligations | Operational urgency and endpoint impact. | Agreement coverage, SLA clocks, business hours, exclusions, and approvals. | Verify that an alert does not silently receive the wrong SLA or contract. |
| 5. Technician action | Script, patch, service action, remote session, and resulting telemetry. | Assignment, notes, checklist, time, expense, status, and client update. | Link evidence without copying secrets or creating conflicting histories. |
| 6. Closure | The condition cleared and the endpoint passed a functional retest. | Resolution, customer communication, time approval, and close code. | Test both directions: closing a ticket must not falsely clear a live condition. |
| 7. Billing and profitability | Device counts, job activity, or usage evidence when contractually relevant. | Contracts, covered work, rates, recurring services, time, charges, and invoices. | Reconcile commercial quantities separately; never treat a sync count as an invoice. |
| 8. Security | Agent enrollment, tenant boundaries, privileged actions, and remote access. | Customer visibility, technician roles, financial permissions, and record access. | Use least-privilege integration identities, scoped fields, rotation, and audit logs. |
| 9. Failure handling | Alert delivery, action failures, stale state, and retry evidence. | Rejected records, workflow failures, orphan tickets, and queue exceptions. | Prove retries, idempotency, replay, dead-letter handling, reconciliation, and pausing. |
| 10. Exit readiness | Export and remove agents, policies, scripts, jobs, sessions, and credentials. | Export customer, ticket, contract, project, time, billing, and audit records. | Know how keys, webhooks, mappings, residual records, and references are retired. |
You need ongoing endpoint inventory, monitoring, alerting, patch workflows, automation, or remote administration, while requests and commercial work are still simple enough to manage elsewhere.
You must manage multiple customers, contacts, queues, agreements, SLA clocks, technician schedules, projects, time, charges, invoices, or profitability—even if another system handles endpoints.
Endpoint events must become owned service work and closed work must retain operational proof. A suite can simplify procurement, but only a controlled pilot proves the workflow.
A ticket is not endpoint health. A PSA ticket can be closed while an endpoint condition remains active, and an RMM alert can clear before the customer impact is resolved. Define separate operational and service-closure criteria, then reconcile them.
Built-in ticketing is not automatically a full PSA. An RMM may create, assign, update, and close operational tickets without owning contracts, project accounting, technician utilization, procurement, invoicing, or profitability. Use the RMM-with-ticketing workflow guide to define the alert-to-ticket boundary, then verify separately which commercial and service-delivery records still need a PSA.
List authoritative IDs, required fields, defaults, visibility, contract and SLA rules, status mappings, credentials, failure owners, and the rollback method.
Use one customer, site, endpoint, alert, duplicate event, recovery, reopen, unmapped value, API failure, and credential rotation. Keep production blast radius small.
Compare source events, tickets, notes, timestamps, statuses, closures, retries, and orphans. Record defects, owners, retests, and an explicit stop, revise, or expand decision.