What an IdP is
An Identity Provider is the service that holds your company identities and vouches for them when a system asks who is who. It is what enables single sign-on: a person logs in once and applications trust that session.
The practical advantage shows on offboarding: revoking the identity at the IdP removes access from every application at once, without relying on someone remembering each system.
Role-based permissions
Inside the platform, access is role-based (RBAC): each person sees only the devices and metrics in their scope. The account owner decides who is an administrator or a partner.
| Role | Sees | Can act |
|---|---|---|
| Owner | The whole fleet | Everything, including billing and roles |
| Administrator | The whole fleet | Policies, lockdowns and reports |
| Team manager | Their group only | Reports and shifts for the group |
| Read only | Defined scope | Nothing — consultation only |
Access windows
Beyond who can log in, the company sets when and from where: the hours and geographic regions each device is allowed to run in. Outside the window, access does not open — and the attempt is logged.
Windows are configured per group, so operations in different time zones live in the same fleet without a manual exception device by device.
Up next
Device lockdown
From blocking a single port to shutting the machine down remotely — and when to use each level.
Keep reading