How to grant permissions to endpoints
Give a user or agent access to a selected device. You must own the endpoint or have permission to manage its access.
Choose the resource and principal
- Open Your Devices and select the endpoint.
- Copy its full endpoint ID. Device names can repeat.
- Identify the principal that needs access. A principal is the user or agent identity that Port OS checks when it receives a request.
Grant the required actions
Read the existing rules with Get access control rules. Use Upsert an access control rule to grant the selected principal only the actions it needs on the full endpoint ID. Follow the operation's policy schema and action identifiers; do not use a display name as a resource ID. For example, allow endpoint discovery for reading, and message sending for control. See Access rules for policy evaluation and required OAuth scopes.
Check and remove access
Test with the receiving account or agent. Confirm it can use the intended endpoint. Remove the grant when access is no longer needed.
A scope error requires a new OAuth approval with the required scope. A resource denial requires the owner to change the resource grant. Adding a scope alone does not share a device.