GoTerm
Menu
Get started
All guides

Keys, people and security

Who can reach which host

Your workspace is one organization, with teams inside it. A team has its own admins, hosts and keys, and a host group can be limited to chosen teams or people.

Updated

On this page
  1. How access is organized
  2. Invite people
  3. Make a team
  4. Limit a host group
  5. See who did what
  6. Who can do what
  7. More on access
  8. Good to know

How access is organized

A host is personal, or a team’s. A team’s members use its hosts and keys; its admins manage them.

Northpeak ITthe organization: owner and adminsOn-calla teamProductionDatabasesBuildPinecrest Dentala customer’s teamWebsiteOffice serversPersonal hoststheir owner’s alonedev-boxhome-lab
Northpeak IT, an organization with two teams, On-call and Pinecrest Dental, each with a group limited to chosen people. Personal hosts sit apart, for their owner alone.
  • A team’s members use its hosts and keys, and never see the keys.
  • A limited group opens only for the people and teams you list, and for admins.
  • Personal hosts are their owner’s alone. No admin can see or use them.

Invite people

  1. Open People and choose Invite someone.
  2. Fill in their Email, and a name if you like.
  3. Pick a Role: Member, or Admin to manage people and teams.
  4. Choose Send invitation. They choose a password from the email.
The Invite someone dialog: an email, a name, and the Member role.Open the full-size picture

Make a team

  1. Open Teams, choose New team and name it.
  2. Open the team and choose Add people, or Invite someone new.
  3. Make someone a Team admin to let them manage its people and hosts.
  4. Give the team hosts by picking it as their Space.
A team’s page, Pinecrest Dental: its two people, one a member and one a team admin.Open the full-size picture

Limit a host group

  1. On Hosts, open a team’s group.
  2. Open its … menu and choose Rename or limit access.
  3. Switch on Only chosen teams and people, and tick who may use it.
  4. Choose Save. Anyone else loses its hosts at once, open terminals included.
The Office servers group’s dialog: Only chosen teams and people switched on, with one person ticked.Open the full-size picture

See who did what

The audit log records sessions and shares, connections the gateway refused, web tabs, changes to saved keys, and devices.

  1. Open Audit log.
  2. Each row says who did what, and when. Admins see the whole organization.
GoTerm’s audit log: sessions attached and shared, each with who, what and when.Open the full-size picture

Who can do what

  • Connect to their teams’ hosts

    Owner
    Yes
    Admin
    Yes
    Team admin
    Yes
    Member
    Yes

  • Keep personal hosts and keys

    Owner
    Yes
    Admin
    Yes
    Team admin
    Yes
    Member
    Yes

  • Manage a team’s hosts, keys and groups

    Owner
    Yes
    Admin
    Yes
    Team admin
    Their team’s
    Member
    No

  • Add people to a team

    Owner
    Yes
    Admin
    Yes
    Team admin
    Their team
    Member
    No

  • Make teams, change roles, branding

    Owner
    Yes
    Admin
    Yes
    Team admin
    No
    Member
    No

  • Use someone else’s personal hosts

    Owner
    No
    Admin
    No
    Team admin
    No
    Member
    No
OwnerAdminTeam adminMember
Connect to their teams’ hostsYesYesYesYes
Keep personal hosts and keysYesYesYesYes
Manage a team’s hosts, keys and groupsYesYesTheir team’sNo
Add people to a teamYesYesTheir teamNo
Make teams, change roles, brandingYesYesNoNo
Use someone else’s personal hostsNoNoNoNo

More on access

  • Access grants and guestsGive someone a host for a few hours, with approval, and the access ends on its own.
  • Connection logSee who connected to which host, when, and from which IP address and country.
  • Single sign-onPeople sign in with your company’s identity provider.
  • Two-factor sign-inAdd a second step at sign-in for every account.
09:05Asks for a hostwith a reason09:12An admin approvesfor four hours09:13Works on itevery connection logged13:12Access endson its own
A grant’s life: someone asks for a host, an admin approves it for four hours, they work, and the access ends on its own.

Good to know

  • An organization has one owner. No admin can demote or deactivate them.
  • The organization’s owner and admins count as admins of every team.
  • Someone who loses a host, by a role or a group, loses its open terminals and files too.

Didn’t find your answer?

Write to us, and an engineer who builds GoTerm will reply.

Ask an engineer