Skip to content

Grant access to an Edge

A grant lets one enrolled App reach one Edge for a time window. Create a grant, follow its state, and revoke it.

Before you begin

  • You are an Owner or Admin. The Edge's Access tab is hidden for other roles.
  • The App shows as active on the Operators page. See Operators and the App.
  • The Edge is active and its licence has not ended.
  • For device commands, the Edge shows In sync in the Sync column of Edges. See Edge configuration.

Create a grant

  1. Go to Edges and open the Edge.
  2. Select the Access tab.
  3. In App, choose the App. Each option shows {operator name} · {model}.
  4. Set Starts and Ends.
  5. Select Remote access, Device commands, or both.
  6. Select Grant access.
  1. Select Operators in the sidebar.
  2. In the operator's Access section, choose the Edge and the App.
  3. Set Starts and Ends.
  4. Select Remote access, Device commands, or both.
  5. Select Grant access.

Only active Apps appear in the App list.

Times use your browser's time zone

Agree the window in the operator's local time first if they work in another time zone.

Permission What it allows
Remote access SSH, RDP and VNC tunnels to the Edge, and LAN Reach to whitelisted LAN devices. See Remote access and LAN Reach.
Device commands /help, /logs, /status and /cpu-utilization in the chat. See Device commands.

Rules and error messages

  • Only one grant with Remote access can be live (scheduled, joining or active) on an Edge at a time. Grants with only Device commands can overlap.
  • Only one live grant per App and Edge. Revoke it before you create another.
Message What to do
start must be before end Fix Starts and Ends.
edge is not active Use an active Edge.
app is not active The App is deactivated. Choose another App.
app has no invite link The App has not finished setup. Ask the operator to open the App while online, or to enroll again.
licence has ended The Edge's or the App's licence end date has passed.
remote access is already granted on this edge Revoke the other grant or wait until it ends.
revoke the current grant first This App already has a live grant on this Edge.

Grant states

The grant list shows {App or Edge} · {state} · {start} – {end}, followed by · remote and · commands for the permissions it allows.

State Meaning What to do
scheduled The start time has not arrived. Nothing. You can Revoke.
joining The start time has arrived and the Edge is setting up the chat. Make sure the Edge is online.
active The operator sees a chat with the Edge in the App. Nothing. You can Revoke.
join_failed The Edge could not set up the chat. The operator sees no chat. Fix the cause, then select Retry.
expiring The grant ended or you revoked it, and the Edge is removing the chat. Nothing. Access is already closed.
expired The window ended. Create a new grant if needed.
revoked You revoked the grant. Nothing.

If a grant is join_failed

  1. Check that the Edge shows Online.
  2. Open the Edge's Commands tab and read the result of the latest join command. See Edge commands.
  3. Ask the operator to open the App while online. The App must have finished enrollment.
  4. On the Access tab, select Retry.

An offline Edge can leave a grant in joining for a few hours before it becomes join_failed.

Revoke a grant

  1. Open the Edge's Access tab, or the operator's Access section.
  2. On the grant row, select Revoke.

Revoke appears for scheduled, joining, active and join_failed grants. A grant that is not yet active becomes revoked at once. An active grant moves to expiring, then revoked.

Warning

Revoke takes effect without confirmation and cannot be undone. To give access again, create a new grant.