SESSIONS & CONTROL
Let someone else sign in or clear 2FA in one browser
Sometimes the person who can finish a sign-in isn't you. The 2FA code goes to a colleague's phone, or the account is theirs. From Tallylamp 0.7.0 you can send them a guest link to one browser instead of your dashboard password. It opens that browser and nothing else.
When a guest link helps
Before guest links, the only way to let a second person into a browser was the admin secret. That secret opens every browser on the deployment, every saved login, and the controls that create agents and copy profiles.
A guest link opens one browser. The guest can watch it and, if you allow it, take control from the agent. They cannot see your other browsers, change settings or reach anything else, and you can end their access at any time.
Make and send the link
Get the page ready
Open the browser in your dashboard and bring up the page you want the guest to use. Take control and navigate there, or let the agent get there first. The guest lands on the tab Chrome is showing, which is the tab you last had open in the live view, and stays on it. If that tab is blank, they land on the newest tab with a page loaded.
Share with a person
Under Guest links, choose Share with a person. Enter the guest's name, choose Watch and take control or Watch only, and pick how long the link lasts, from 15 minutes to 24 hours.
Decide about the address bar
Leave Address bar and tabs empty to keep the guest on that page. List host names such as accounts.example.com to let them open those sites, or enter * for anywhere.
Send it privately
Copy the link, which is shown once, and send it in a direct message. The link works once: the first browser to open it gets access. If the guest says it did not work, revoke it and make another.
What the guest sees
The link opens a small page with one button, Open the shared browser. The page waits for that click so that link scanners in mail and chat apps cannot use the link up first. After the click, the secret part of the link is gone from the address bar and the guest's session lives in a cookie until the link expires.
The guest sees the browser's name, the live page and a Take control button. While they hold control, the agent cannot change the browser. Give control back returns it to the agent, and Leave ends the link for good.
| A guest can | A guest cannot |
|---|---|
| Watch the tab you handed over | See your other browsers, tabs, settings or audit log |
| Take control from the agent | Take control from you or another person, or force a takeover |
| Click, type, paste, scroll, reload | Use Full browser, Chrome's settings or extensions |
| Go back and forward through pages they reached | Go back into pages that were open before you shared |
| Open the hosts you listed, if any | Stop, delete, rename or reconfigure the browser |
Take it back
Revoke under Guest links ends the guest's session, closes their view and returns control to the agent at once. You can also take control from a guest at any time; their view drops back to watching. The link stops working when it expires, and a guest holds control for at most 30 minutes at a stretch before the agent gets a turn.
Everything the guest does goes in the audit log under the name you gave them: opening the link, taking and returning control, and anything they were refused. If someone opens a link that was already used, that is logged too. Revoke the link then, because it may have been forwarded.
Docs behind this guide
Based on Tallylamp's documented behaviour. See the source for API details and release-specific settings.