Devices
3 min read
A device is a computer belonging to someone outside the organization with Kujira Companion installed, so you can give them remote support. Agents with access can work on it: read and write files, run commands, see the screen and control the mouse and keyboard.
You don't need to add a device to use your own computer with your agents: the desktop app links it to your account and only you use it.
Who has access
A device is not private to whoever adds it. It can be seen and controlled by:
- The agents with access, within the permissions granted on the computer itself.
- The assigned operators, through those agents. Whoever adds the device is assigned to it.
- The organization's owners and admins see every device and can reassign it, but their agents only use it if they are assigned. If they assign themselves, it is recorded in the audit log and whoever already had it is notified.
Before adding a computer with sensitive information, check who will be assigned to it. When you create the device, the dashboard asks you to accept these terms.
Add a device
- In Hosts, click Add host and give it a name.
- Accept the access terms and click Create.
- Copy the install link or email it to whoever will install it. It is shown only once.
Once Companion is installed with that link, the computer is linked and starts reporting its status: connection, CPU, memory and disk.
Agents and operators
In the device detail:
- Agents with access: turn on the agents that can use the computer.
- Assigned operators: choose which team members work with it. If someone asks an agent to use a device they are not assigned to, it does not exist for that agent.
- Tags: group devices to filter them.
Permissions on the computer
What an agent can do is decided by the person using the computer, from Companion: which capabilities they grant (files, terminal, screen, control) and whether each action is asked for or runs without asking.
To control the mouse and keyboard, the agent requests a time-limited session. While it lasts, the computer shows a border and the agent's cursor, and the person can take back control at any time.
Suspend, regenerate or delete
| Action | Effect |
|---|---|
| Suspend access | Cuts access and blocks permissions. It can be reactivated without reinstalling. |
| Regenerate token | Invalidates the current token. Companion must be reinstalled and permissions granted again. |
| Delete | Removes the device. It cannot be undone. |
If a computer is compromised, suspend access and regenerate the token.