Mobile-ID · Evidence-based trust
Records glossaryContact
Trusted Records · Platform

Controlled customer support

Customers track requests and authorize the scope/duration of support access.

Inputs and starting conditions

Support requests, related records/projects, purposes, requested permissions and session duration.

Workflow and control gates

  1. 01Submit request
  2. 02Review support access
  3. 03Approve / deny
  4. 04Track actions
  5. 05Revoke and confirm

Do not grant whole-tenant access to solve a single-record issue. Approvers need authority over the relevant scope; expiry/revocation must stop further access.

Exceptions and recovery

Excessive scope, expired access or inappropriate actions trigger denial/revocation, incident reporting where needed and retained audit.

Roles, outputs and states

ResponsibilitiesEvidence and states
Owners approve; support acts within scope; security/audit inspect access; project administrators track resolution.Request/status, approval scope/expiry, delegated-session audit, revocation and closure receipts. States: requested → approved / denied → active → expired / revoked.

Scenario and acceptance criteria

ILLUSTRATIVE SCENARIO

A user needs access support; submit a redacted description without sensitive records through the website form.

Complete only when

Requests have a contact, scope and status; opening email is not reported as submission.

Interfaces for this workflow

Start with a verifiable scope.

Agree record classes, quality criteria, permissions and evidence before scaling.

Plan assessment

Search Trusted Records

Enlarged source image

Illustrative source image; displayed values are not service commitments.