PKPEEK Docs
Docs/Getting started

Operator assignments

Propose, independently review and revoke PEEK operator role grants, customer scope and validity windows.

PEEK Platform Administrator · PEEK Technical Reviewer

/peek/operators
Live walkthrough · Operator assignments
/peek/operators

PEEK operator assignments manages platform roles, customer scope and validity for PEEK workforce identities. Grants are proposed, independently reviewed against the exact proposal, and revoked immediately. The page is available to operators holding customer.activate (propose) or change.review (review); others see a Restricted banner.

Propose a grant or change

  1. 1

    Start a proposal

    Choose Propose on an operator row (update) or start a new one.

  2. 2

    Identify the operator

    Enter Operator subject (PEEK workforce IdP), Display name and optional Person reference.

  3. 3

    Choose roles and scope

    Tick Platform roles and either All customers or specific tenants under Customer scope.

  4. 4

    Set validity

    Valid from defaults to now and Expires at to 90 days later.

  5. 5

    Justify and submit

    Write a Justification and choose Submit for independent review. The proposal is hashed; nothing takes effect yet.

Review a proposal

  1. 1

    Open the pending item

    Pending proposals show a before/after diff of roles, scope, validity and status.

  2. 2

    Record decision

    Choose approve, return or reject and enter a Rationale. You approve the exact proposal shown; any change after loading is rejected.

Operator table columns

Display name / subject
Workforce identity (issuer + subject).
Roles
Active platform roles.
Customer scope
*All customers*, a list of tenants, or *No customers*.
Valid from / Expires at
Assignment window; outside it sign-in is refused.
Grantor / review
Who proposed it and the review reference.
Status / active sessions
Assignment state and current session count.
Rules — You cannot grant to yourself or assign an agency membership. A PEEK Technical Reviewer other than the grantor approves the exact proposal hash — nobody reviews a grant to themselves. Revoke now (with rationale) ends the assignment and its active sessions immediately. All decisions appear in Decision history.