Available operations and their risk tiers

These are all the operations available today. The number in brackets is the maximum routers one operation accepts — deliberately low for the dangerous ones.

Read — changes nothing on the device

• Full diagnostic (50) — a complete report on the router's health, link and resources.
• Check RouterOS updates (50) — installed and available versions on the selected channel.

These are completely safe and suitable for scheduled recurring runs.

Safe write — cannot affect your link to the device

• Add a hotspot user (50)
• Add a User Manager user (50)
• Set the RouterOS update channel (50) — decides which release the device considers "latest", with no reboot.

Guarded write — typed confirmation, with a rollback

These touch settings that could cut the link, so they take a backup and arm the automatic rollback before running.

Provisioning and setup

• Provision a customer router (bridge + hotspot) (1) — detects the internet uplink, bridges the remaining ports, and builds the whole hotspot.
• Provision hotspot on a new router (3)
• Set up User Manager (wipe and rebuild) (1)
• Install or enable the User Manager package (5)
• Enable a feature blocked by device mode (1) — for devices that arrive with hotspot switched off from the factory.

Protection and maintenance

• Block connection sharing (hotspot bridge) (50) — stops a subscriber re-sharing the service to other devices.
• Enable NTP time sync (50) — lets the router recover the correct time after a power cut.
• Upgrade RouterOS (3)
• Upgrade the RouterBOOT bootloader (10)
• Reboot the router (10)

Removal — irreversible

• Remove the hotspot entirely (1)
• Remove User Manager entirely (1)
• Purge all hotspot vouchers permanently (1)
• Purge all User Manager vouchers permanently (1)

Advanced

• Custom command (20) — a structured command (path + fields) whose risk is classified automatically before it is allowed. It is not a free shell: paths that could cut off management are forbidden.

Why do some operations accept only 3 routers?

Because writing a system image to flash cannot be undone. A low limit forces a fresh typed confirmation every few devices, so a whole-fleet upgrade never passes on a single click. To cover more, use [Campaigns](/en/help/articles/operations-center-campaigns-and-recurring).