The problem
Contractors and agencies need access to your tools for weeks, not years. Handing them passwords means changing everything when they leave, and trusting that nobody kept a copy.
How LayerT handles it
- Give them access, not passwords. Add the contractor to a group in your directory. They sign in to the shared accounts that group can use, and never see a password.
- Short sessions, with approval. Require an approver for sensitive accounts, and keep sessions short.
- Their name on the page. Turn on the watermark, and every screen shows who is signed in, which makes a screenshot traceable.
- Record what matters. For the accounts where you need a replay, switch on recording.
- Gone at the end. Deactivate them in your directory. LayerT ends their sessions and access everywhere, and there are no passwords to change.
Good to know
- The watermark deters and attributes. It can’t stop a phone camera, and we say so.
- Contractors need LayerT in the Chrome profile they work in. Your MDM can install it, or they can set it up themselves with the work account you give them. Either way, the browser waits for an administrator’s approval before it gets any rules or shared accounts.
- A rule can apply to a directory group such as Contractors, or to everyone outside one.
- Quarterly access reviews ask each account’s owner to confirm who still needs it, and show whether each person actually used it, so a finished engagement doesn’t linger.
