All installers accept a workspace key so no per-machine sign-in is needed.
Windows — GPO or Intune
msiexec /i optimetrix-agent.msi /qn WORKSPACE_KEY=
Deploy as a machine-targeted assignment; the service installs for all users of the device.
macOS — Jamf / Kandji / Intune
Upload the .pkg plus the configuration profile (workspace key + PPPC pre-approval). Scope to the pilot device group.
Linux — Ansible / config management
Drop /etc/optimetrix/agent.conf with workspace_key= before enabling the service.
Keys are per-workspace, not per-user. Rotating a key is done from the admin console; ask support if you need a fresh one for a new site.