The Right People See the Right Data
Large organizations don’t have one administrator. They have IT teams, security teams, department managers and HR, each with a different need to know. Lockfy lets you decide precisely what each person can do and which users, workstations and accounts they can see.
How It Works
| Capability | Description |
|---|
| Capability Permissions | Grant specific abilities, such as viewing settings, editing policies or locking any session, instead of all-or-nothing admin rights |
| Tag-Based Data Scoping | Tag users, workstations, local accounts and policies, then grant access by tag, so a branch or department admin only sees their own records |
| Organizational Hierarchy | Set each employee’s manager and view the organization as an interactive org chart |
| Manager & HR Visibility | Let managers see their team’s session data, down as many levels of the hierarchy as you choose |
| Organization-Wide Grants | Grant access to all workstations, users or local accounts when a role needs it, with SIEM auditing expected for these grants |
| Grant History | A durable record of every grant and revocation, including who granted it and when |
| Bulk Tagging | Tag many users, workstations or policies at once directly from the grids |
| Passwordless Portal Sign-In | Administrators sign in with a one-time code sent by email, which expires quickly and locks out after repeated failures |
Key Benefits
| Benefit | Impact |
|---|
| Least Privilege | Each administrator holds only the permissions their role needs |
| Delegated Administration | Branches, regions and subsidiaries manage their own workstations without seeing each other’s |
| Accountable Managers | Managers see their own team’s security habits, which drives real behavior change |
| Audit-Ready Access | Every grant is attributed and recorded, ready for internal and external auditors |
Use Cases
| Scenario | Application |
|---|
| Multi-Branch Bank | Each region’s IT team manages only its own branches’ workstations |
| Hospital Group | Each hospital’s IT team sees only its own facility, while the group SOC sees everything |
| Government Agency | Department managers review their employees’ session behavior; HR sees organization-wide trends |
| Holding Company | Subsidiaries are separated by tags inside a single Lockfy deployment |
Ready to Delegate Securely?
Learn how Lockfy Enterprise can provide always-on protection for your organization.
