Four rules
The most useful tool here, and the most dangerous
  • Read-only, refused server-side. Every mutating endpoint rejects an impersonated session. The controls are not hidden — hiding a button is a suggestion, refusing a request is a rule.
  • 15 minutes, then it ends by itself. There is no extend. Starting a second session is a second audit row, which is the point.
  • A ticket reference is required to start. There is no way to look at somebody’s panel out of curiosity that does not leave your name beside a ticket number.
  • The client sees it. Their own Activity page lists the session, who ran it, the ticket and how long it lasted. Tell them before you start — they will find out either way, and being told is very different from discovering it.
Your sessions
Yours only — an agent does not see the team’s
StartedClientTicketLastedState
14 Sep 12:42:00Adam Voss91046 minLive now
13 Sep 11:42:00Lena Hoff908815 minEnded
11 Sep 13:42:00Marc Dubois90524 minEnded