Skip to content

Operator access

Operator access lets a named person reach an Edge from the Privitty App for a set time window.

The building blocks

Term What it is
Operator A person you add on the Operators page, with a name and an email address. An operator does not sign in to the portal.
App One installation of the Privitty App (desktop, Android or iOS) that an operator has enrolled. One operator can enroll several Apps.
Grant A time-boxed permission for one App to reach one Edge. A grant allows Remote access, Device commands, or both.
Licence end The date the App's access ends. It follows your Watchtower subscription term.

Only Owners and Admins can manage operators and grants. See Users and roles.

The workflow

  1. Add the operator and send an invite. See Operators and the App.
  2. The operator enrolls the App with the invite link or QR code.
  3. Grant access to an Edge with a start time, an end time and permissions. See Grant access to an Edge.
  4. The operator works. When the grant starts, a chat with the Edge appears in the App. In the chat, the operator:
  5. Access ends at the end time, or when you revoke the grant.

What must be true for an action to work

  • The App's access has not ended. See App licence and renewal.
  • The Edge is online, has a valid licence, and shows In sync (it has applied its configuration).
  • A grant for this App on this Edge is active, has not reached its end time, and allows the action.
  • For LAN Reach only: the Edge's configuration lists at least one LAN target.

Privacy

Watchtower records that a grant exists, its window and its permissions, and keeps an audit trail of grants and revocations. It does not see device command replies, logs, or tunnel traffic. See Audit.

Next steps