What can Passbeam support see of my clients' data?

As little as possible, and the limits are built into the product.

Some things we simply don't have. Passbeam doesn't keep a copy of your clients' directory. Account and device checks are made with Microsoft when they're needed. Private keys are created on devices and never sent to us. And Passbeam never sees the traffic on your clients' networks. It only decides whether a device may connect.

What we do keep is identifiers and results: which device or person authenticated, when, through which access point or switch, and the result with the reason. That's what answers "why can't this person get on the network".

If our support team needs to look at your account, they open a support view, which is read-only. While it's open, everything in the product refuses. Support can't issue or revoke a certificate, change a setting, or reply to your tickets as you. We reply to tickets from a separate place, with the view closed.

Every support view is recorded in your audit log, under Organisation → Audit log, including who looked and when.

Inside your own account, your team's access is set by role and can be limited to particular clients. Every permission is checked when an action runs, not just hidden in the interface.