app.support_sessions
TableRow level security on
A support session (Section 4.6.1, Section 8): the org's Owner lets its partner's staff (1060) or the platform team (A90) read the org for at most 24 hours. Neither reads anything of the org without one. Created and ended only through the RPCs; every grant, every platform read and every end lands in the org's audit ledger.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Client org that granted the session.References app.organizations.id |
| grantee_org_id | uuid | Yes | Partner org whose staff may read while a Partner session lasts; null for a Platform session.References app.organizations.id |
| reason | text | No | Why the session was granted, in the Owner's words. |
| starts_at | timestamp with time zone | No | When access began. |
| ends_at | timestamp with time zone | No | When access ends on its own, at most 24 hours after it began. |
| ended_at | timestamp with time zone | Yes | When someone ended the session early. |
| ended_by | uuid | Yes | Person who ended it early.References app.people.id |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| grantee | app.support_session_grantee | No | Partner or Platform. |