Grant and Revoke process
ForThe additional securitygranting and temporalrevoking of access control,by Knoc'sKnocknoc supportoccurs on a "number of events, including:
- User login
- Interactive 'click to
grant"grant'andactivity - Interactive 'click to
revoke"revoke'option.activity - User login/session timeout
- User logout
External factors such as the flushing of lists/policies on the orchestrated system (eg: an unrelated firewall reboot) may also cause the granted access to be revoked, however this depends on the orchestrated system or device.
This requires the user to click a button after logging in, prior to each grant being processed. This offers an additional layer of security and interactive workflow.
These are also logged as specific events - see logging.