Portal tour¶
The portal is the web interface for Watchtower. Use it to sign in, find each section in the sidebar, and see what your role allows.
Sign in for the first time¶
New users get an email with the subject Set up your Watchtower account. The link opens the setup page.
- Open the link. It is valid for 24 hours and works once.
- On Choose a password, enter a password and select Continue.
- On Set up your authenticator, scan the QR code with an authenticator app. If you cannot scan it, type the key under Manual entry into the app.
- Enter the 6-digit code and select Confirm.
The portal signs you in. A new install with no Edges opens Health. Otherwise it opens Edges.
Note
If the link expires, contact Privitty support through the channel listed in your Privitty agreement. The portal cannot resend a setup link.
Password rules¶
- At least 12 characters.
- Not one of the 10,000 most common passwords.
- No other rules. Length matters more than symbols.
A weak password shows password does not meet the policy.
Sign in again¶
- Enter your Email and Password. Select Continue. Use the eye icon to show or hide the password.
- On Two-factor authentication, enter the 6-digit code.
- Select Sign in.
You can choose the second factor when both are available:
| Method | How |
|---|---|
| Authenticator | Enter the code from your authenticator app. |
| Select Email me a code. The code arrives in your inbox and expires in 10 minutes. |
If you have no authenticator app set up, for example after an owner reset your MFA, only Email is offered. Set up the authenticator again in Settings.
unauthorized means the email, password, or code is wrong. rate_limited means too many attempts. Wait a minute and try again.
To reset a forgotten password, select Forgot password. See Settings.
Sidebar¶
| Section | Use it to | Page |
|---|---|---|
| Edges | List Edges, add one, open an Edge. | Edges |
| Operators | Create operators and App invitations. Owners and admins only. | Operators |
| Sites | Organize Edges into sites and groups. | Sites and groups |
| Templates | Keep reusable configuration. | Templates |
| Rollouts | Follow and control staged changes. | Rollouts |
| Updates | Update the Edge agent version. | Updates |
| Certificates | Review and revoke certificates. | Certificates |
| Approvals | Accept or reject new Edges. | Approvals |
| Audit | See who changed what. | Audit |
| Billing | Check your subscription. | Billing and usage |
| Usage | Compare tags with your ceiling. | Billing and usage |
| Health | Check that Watchtower is working. | Health |
| Settings | Manage your sign-in and install settings. | Settings |
| Users | Invite people and assign roles. Owners and admins see the link. | Users and roles |
The sidebar footer shows your email, a light and dark theme switch, and Sign out. Use the arrow on the sidebar edge to collapse it.
A red banner at the top means the subscription is restricted. An amber banner means a licence end is near. See Billing and usage.
Who can see what¶
Your role decides what you can do. See Roles and permissions.
- Operators and Users appear only for owners and admins.
- Lists such as Edges, Sites, Templates, and Audit show only the sites and groups your role covers.
- Billing, Usage, Health, Certificates, and owner settings need a role that covers the whole organization. With a site-only or group-only role, these pages show an error.
- Audit is for owners and admins.
Sign out and idle timeout¶
Select Sign out in the sidebar. Watchtower also signs you out:
- after 30 minutes without activity, and
- 12 hours after you signed in.
Sign in again to continue. A password reset signs you out on every device.