Granting Access to a Third-Party Access Partner

Overview

InflatableOffice Users (account owners) can delegate specific tasks to approved Third Party Access Partners, ensuring that experts have the access they need while the owner maintains total control over sensitive data and system permissions.

Background

Third Party Access (3PA) is designed for IO users who do not have a White Label (add link to White Label KB) but want to grant a third party (e.g., a consultant, marketing agency, support provider, or business partner) limited access to manage or assist with their IO account. It provides a unified, secure, and auditable way for external entities to access IO accounts on behalf of those users. The account owner controls who gets access and what they can do - while IO remains the gatekeeper for who is eligible to be listed as a Third Party.

How to Grant Access

1. Login and navigate to the Settings > Workers page.
2. Click the "Add Worker" dropdown.
3. Select "Add 3rd Party Access".
4. A selection dialog opens with two options: Event Hawk or Other. Choosing Other shows the dropdown of approved third parties.
5. Unless you are working with Event Hawk, choose “Other” and select from a dropdown of available third parties.
6. Once you pick the company, the system will take you to the worker configuration page.
   1. Set a password and click Save&Close. The username, email and mobile are set automatically from the selected third party.
   2. The system automatically creates a worker (unapproved and without permissions) and names it "{Company} Support".
   3. Note: The account owner (you) doesn't need to type the name. The worker form then opens with the chosen company already applied.
   4. You will receive an email with instructions on how to approve the worker and set permissions. 
7. The System automatically notifies the Third Party that the access process has started.
8. Open up the worker page again by clicking on the worker in your Settings > Workers page.
9. Following the instructions in your email, set this worker to Approved (click the check mark box) and assign the permissions you want to grant the third party.
10. Upon approval, the System notifies the Third Party that they now have an approved way to log in.

Key Rules & Behaviors

• One support worker per company - If an account owner has already granted access to a Third Party, that company no longer appears in the picker. Duplicate grants are rejected.
• Multi-Factor Authentication (MFA) belongs to the Third Party - The login email and phone number of the worker are the Third Party's own contact info. The account owner cannot change them. The account owner sets the password.
• Permissions are explicit - The worker is created with zero permissions. The account owner must actively approve and configure access before the Third Party can do anything.
• Visibility - The Workers page shows an "Access" column marking 3rd Party / Support workers (only visible when the account has such workers). The worker form displays a badge showing the type and which company provides the support.
• Filtering - Account owners can use the preset filter "3rd Party Access" on their Workers page to see all external access at a glance.
• Deletion - Deleting a 3rd Party/support worker fully removes its partner link.
• Event Hawk Only: Once an account grants access to Event Hawk, it cannot add any other third party afterward.

Security Note: Granular Control

When granting access, you are in complete control. You do not provide blanket access; instead, you define specific, granular permission levels. This process ensures that third-party access does not circumvent your standard worker module processes, allowing you to maintain full visibility and security over your data.

Usage Policy: Worker Module Compliance

Third-Party Access is not a substitute for the standard IO Worker Module. This feature is explicitly designed for external professional collaboration. Users are prohibited from using Third-Party Access as a loophole to create free, internal worker accounts to avoid standard licensing requirements.

Summary: Third Party Access creates a user-initiated, centralized, auditable system where account owners can leverage external expertise safely without compromising account integrity or violating licensing terms:

• Any third party can formally request to be listed
• IO Administration vets and approves who is eligible
• The account owner explicitly grants access and controls permissions
• 3PA workers are clearly identifiable and filterable

Related Article(s): Partners - Applying to be a Third-Party Access Partner