Objects & Groups

DataRelay Link v2.4 uses explicit Object families.

Network Objects

Normal user-created types are IP, CIDR, and FQDN. Registered Managed Hosts also appear as Network Objects of type Managed Host.

set network-object github type fqdn value github.com
set network-object office-admin type ip value 203.0.113.10
set network-object vpn-admin type ip value 198.51.100.20
set network-group approved-admins members office-admin,vpn-admin

Service Objects

Schema types are TCP, UDP, and Fixed TCP. The normal Wizard offers SSH, HTTP, HTTPS, RDP, Custom TCP, and Fixed TCP. UDP can exist through explicit configuration, but Remote Service and Internet Access v2.4 reject UDP use.

set service-object ssh type tcp port 22
set service-object http type tcp port 80
set service-object https type tcp port 443
set service-group web-services members http,https

Permission Objects

Permission Objects contain reusable AI-operation permissions.

set permission-object read-only permissions host-info,process-read,file-read
set permission-group observers members read-only

Group rules

Groups are flat reusable collections. Context validation applies to the whole selected Group. Internet Access destination, for example, rejects a Network Group if any member is a Managed Host. File permissions also need rule-bound paths in the AI Access rule.

Last modified on October 29, 2026

Getting Started

Practical Use Cases

Managed Hosts & Objects

Remote Services & Access

Internet Access

AI Access

CLI & Configuration

Deployment

Operations

Security & Reference

Objects & Groups

Objects & Groups

Network Objects

Service Objects

Permission Objects

Group rules

​Objects & Groups

​Network Objects

​Service Objects

​Permission Objects

​Group rules

Objects & Groups

Network Objects

Service Objects

Permission Objects

Group rules