Team and invites¶
Owners manage who can use the Bridge from the Team page.
Roles¶
| Role | Can |
|---|---|
| Owner | Everything, including managing the team |
| Admin | Add clients, change standards, create and revoke enrollment keys, connect Microsoft 365, and revoke devices |
| Technician | View everything they have access to, and run Microsoft 365 scans |
| Viewer | Read-only: the fleet, device and tenant pages, the Checks page, and reports |
Access¶
Each person has access to All clients or Selected clients. People with selected clients only see those clients' devices, tenants, checks, and reports, everywhere in the Bridge.
Client portal
Invite a client's contact as a Viewer with access to only their organization. They get a read-only view of their own compliance, with nothing from your other clients.
Owners always have access to every client. Only people with access to all clients can add new clients.
Invite someone¶
- Open Team and select Invite person.
- Enter their email, choose a role, and choose All clients or Selected clients.
- Select Create invite, then Copy link and send it to them.
The link works once and expires after 72 hours. Pending invites are listed on the Team page, where you can create a New link (the old one stops working) or Revoke it.
Accepting an invite¶
The person opens the link and:
- Enters their name.
- Chooses a password of at least 12 characters.
- Scans the QR code with an authenticator app and enters the 6-digit code.
Their account is created only when the code checks out, and they're signed straight in. They sign in from then on with their email, password, and authenticator code.
Manage people¶
Select Manage next to a person to:
- Change role or access. Their open sessions end so the change applies immediately.
- Reset sign-in. Creates a one-time link that lets them set a new password and authenticator. Use it when someone loses their phone. Their old password and authenticator stop working.
- Disable an account. They're signed out immediately and can't sign in. Enable reverses it.
There must always be at least one active owner, and you can't disable your own account.
Activity¶
The bottom of the Team page lists recent activity, such as invites, sign-in resets, role changes, standards changes, and revoked devices and keys, with who did it and when.