Break-glass shell access
Zozo support starts the normal break-glass flow by filing a Break-glass Request, which asks for time-boxed SSH access to your Stack's VM. You can't open a Break-glass Window yourself. When a Request is pending, a banner at the top of every Dashboard page shows support's reason and requested duration.
Select Grant access to approve the Request and open the Window, or select Deny to refuse it. While a Window is open, select Revoke access to close it early. Zozo support can also use an emergency override when you can't be reached; Zozo emails your tenant administrator before the Window opens.
Checking whether a window is open right now
A banner appears at the top of every page in your Dashboard whenever a Request is pending or shell access is open on your Stack. An open Window shows when it opened, when it auto-closes, why access was requested, and whether it opened with your consent or through an emergency override. When neither a Request nor an open Window exists, the banner doesn't appear.
What an open window actually means
- It's SSH access with full sudo privileges on your Stack's underlying VM. Support can read files on the VM, including the Event journal, Workspaces, and Credential files.
- It's always time-boxed and closes automatically; nobody has to remember to close it.
- If it was opened as an emergency override because nobody could reach you for consent first, your tenant administrator is notified by email before the Window takes effect.
- Every Window, however it was opened, is permanently on the record in the Control Plane.
Related
- Network Quarantine: the other disclosure-only banner your Dashboard can show.
- Two Surfaces: the Control Plane and Stack split this banner's own disclosure mechanism rides on top of.