Working with a team
Two different things get called “access” in Cmdop, and they are decided in different places: your organization and plan in the account console, and what may actually run on a machine in that machine’s own permission policy. Adding a teammate to your organization grants them no execution rights on any computer.
Your organization and its plan live in the account console . Members, the plan, and payment are managed there — see Billing.
What can happen on a machine is decided by that machine, through its permission policy. Being in an organization does not grant execution rights on someone’s computer; the machine’s rules do. Read the effective policy and the decisions it made from Machines in the web console, or on the machine itself:
cmdop permissions list
cmdop permissions auditReaching a machine from outside its network also needs the relay’s own credentials — the relay admin password and, when armed, the machine’s connection PIN. Those are separate from your Cmdop account. See Security.
Common questions
Does adding a teammate grant machine access?
No. Adding someone to the organization does not grant execution rights on any machine.
Where is team membership managed?
Organization membership, plan, and payment are managed in the account console at my.cmdop.com .
What decides what a teammate may run on a machine?
The machine’s own permission policy decides what may run. Organization membership and plan state are separate from execution permissions.
Cmdop