Device Trust
See every device and active session signed into your workspace, and lock, revoke or terminate any of them — including biometric enrolments and mobile push registrations.
Device Trust lives under Security → Device Trust. When a laptop is lost, a phone is replaced, or someone leaves, this is the page that ends their access to the workspace on that hardware, without waiting for a password change to propagate.
What The Dashboard Shows
- Trusted devices — devices currently active against your workspace.
- Locked or revoked devices — access already withdrawn.
- Active sessions — live signed-in sessions, per user.
- Biometric enrolments — fingerprint or face unlocks registered on mobile.
- Mobile push devices — registrations that can receive push notifications.
Each list is searchable and filterable by status, so you can go straight to one person or one device.
The Actions, And What Each One Means
| Action | Effect | Use when |
|---|---|---|
| Lock device | Blocks the device while keeping its record. | A device is missing and might be found. |
| Unlock device | Restores a locked device. | The device turned up, or the lock was precautionary. |
| Revoke device | Withdraws trust permanently. | Hardware is disposed of, sold, or gone for good. |
| Terminate session | Ends one live session immediately. | Someone left a session open somewhere they should not have. |
| Terminate all of a user's sessions | Signs that person out everywhere. | Offboarding, or a suspected account compromise. |
| Revoke biometric | Removes a fingerprint or face enrolment. | A shared or reassigned phone. |
Offboarding, In Order
- Terminate all of the person's sessions.
- Revoke their devices and biometric enrolments.
- Disable the login itself — see Roles & Access. If they are staff, ending employment can disable the login without deleting their employee record.
Doing only step 3 can leave a live session or a push registration behind on hardware you no longer control.
Permissions
Viewing device trust and acting on it are separate permissions. The same management permission also gates Offline Operations, since both are about what devices in the field are doing. Personal device controls for your own account are under Settings → Security.
Need help with this topic?
Capture the module, record number, branch or warehouse, user, visible message, and what you expected to happen before contacting support.