Qualified statement
Portfolio and MSP workflows separate tenants, domains, responsibility and delegated access.
RLS, delegation and cross-tenant testsHelp and support HLP-013
Support access
Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on. Use this guidance to complete the task safely, understand the result and know where to go when the expected state does not appear.
Bounded, non-exploitative Authorised external assessment.
Bounded evidence. Explicit responsibility. No hidden inference.
The useful answer
Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on.
Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on. Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on. Use this guidance to complete the task safely, understand the result and know where to go when the expected state does not appear.
Route-specific context
The decision this page is designed to support
- Who should use this
- Workspace administrator
- Task outcome
- Grant and revoke time-limited support access. Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on.
- Safe checkpoint
- Tenant isolation, delegated access, AAL2 controls and bounded signed downloads protect customer evidence. Evidence basis: RLS, delegation and cross-tenant tests.
01
02
03
A deliberate path
From permission to retained evidence
- 01
Create a time-limited support grant for the named workspace and select the minimum access needed.
- 02
Confirm the support reason and expiry; platform administration does not silently impersonate a customer.
- 03
Revoke the grant when the task is complete and review the immutable audit event.
Evidence before assertion
What the product can support
The interface reports real operation states. Do not repeat a submission while a job is active; use the shown recovery action or contact support with the non-sensitive reference displayed on screen. Tenant isolation, delegated access, AAL2 controls and bounded signed downloads protect customer evidence.
Direct answers
Questions a careful reader should ask
What does Support access establish?
Use this guide to grant and revoke time-limited support access and verify the expected product state before moving on. It establishes only what the governed evidence supports.
What does it not establish?
It does not prove complete organisational security, exploitability, breach likelihood or the absence of unobserved weaknesses.
How can I verify the conclusion?
Use the linked evidence or capability record to inspect source, observation time, target, responsibility and the condition required for closure.