---
title: Approve a support access request
description: Review, approve, deny or revoke a time-boxed, read-only support session, and know what the support team can and cannot see.
order: 22
updated: 2026-09-16
keywords: support, access, session, approve, revoke, read-only
---

ChowChirp support cannot look at your data without your approval. When they need to diagnose a problem, they request a bounded session that you approve.

**Before you start:** owner access. Approval asks for your authenticator code.

## What a support session is

- Requested with a reason code and a named outlet.
- Read-only by default, limited to a short allowlist of diagnostic views.
- Time-boxed. The request itself expires after 30 minutes if nobody acts on it.
- Never impersonation. Support works in its own session and never acts as you.

## Approve or deny

1. Open **Settings › Support**. Pending requests are listed with the reason, the outlet and the requested duration.
2. Choose **Approve** and enter your authenticator code, or **Deny**.

While a session is active, a banner shows on every screen for everyone in your organisation with the reason and the time remaining. It deliberately does not show the support operator's identity.

## Revoke early

Open the active session and choose **Revoke**. Access ends immediately.

## Review afterwards

**Settings › Audit** lists past support sessions and any reads they performed, and the access-review queue flags sessions needing a look.

## Related

- [Invite a team member and set outlet access](/docs/how-to/invite-a-team-member)
- [Data retention and privacy](/docs/reference/data-retention-and-privacy)