Operator assignments
Propose, independently review and revoke PEEK operator role grants, customer scope and validity windows.
PEEK Platform Administrator · PEEK Technical Reviewer
/peek/operatorsPEEK operator assignments manages platform roles, customer scope and validity for PEEK workforce identities. Grants are proposed, independently reviewed against the exact proposal, and revoked immediately. The page is available to operators holding customer.activate (propose) or change.review (review); others see a Restricted banner.
Propose a grant or change
- 1
Start a proposal
Choose Propose on an operator row (update) or start a new one.
- 2
Identify the operator
Enter Operator subject (PEEK workforce IdP), Display name and optional Person reference.
- 3
Choose roles and scope
Tick Platform roles and either All customers or specific tenants under Customer scope.
- 4
Set validity
Valid from defaults to now and Expires at to 90 days later.
- 5
Justify and submit
Write a Justification and choose Submit for independent review. The proposal is hashed; nothing takes effect yet.
Review a proposal
- 1
Open the pending item
Pending proposals show a before/after diff of roles, scope, validity and status.
- 2
Record decision
Choose approve, return or reject and enter a Rationale. You approve the exact proposal shown; any change after loading is rejected.
Operator table columns
- Display name / subject
- Workforce identity (issuer + subject).
- Roles
- Active platform roles.
- Customer scope
- *All customers*, a list of tenants, or *No customers*.
- Valid from / Expires at
- Assignment window; outside it sign-in is refused.
- Grantor / review
- Who proposed it and the review reference.
- Status / active sessions
- Assignment state and current session count.
Related guides
Operator roles and capabilities
The five PEEK platform roles, the capabilities each one holds, and how capabilities gate screens and actions.
Signing in to the PEEK center
Workforce identity sign-in with phishing-resistant MFA, session expiry, sign-out and the boundary-testing options.
Access and credential audit
Screen 8.2 — filter and export authorized identity, access, credential-lifecycle and policy audit events.