Mediloop
WORKSTATION AGENT

Workstation Agent — Permissions & Resource Access

8 of 12

Control local resource access with explicit tenant policy, user consent, connector scopes, least privilege and revocation.

Least-PrivilegeUser ConsentAuditableRevocableTenant Controlled
The permission chain
1
Tenant Policy
Organization defines allowed resource types and rules.
2
Workstation Trust
Workstation is registered and trusted.
3
User / Session
Authenticated user with roles and MFA.
4
Connector Scopes
Connector declares required resources and permissions.
5
Resource Binding
Resources are bound to connector scope.
6
Runtime Consent
User consents when required.
7
Access Granted
Connector accesses only bound resources.
8
Audit & Revoke
All access is logged and can be revoked.
No connector can access any resource without passing through the entire permission chain.
Resource types
USB / HID devices — microphones, foot pedals, cameras
Serial / COM ports — lab equipment, scales, monitors
Bluetooth devices
Smart-card readers and identity devices
Local applications
Files & folders
Printers
Network endpoints
Vendor SDKs / drivers
Permission model
LevelDescriptionExample
Tenant PolicyGlobally allowed resource typesAllow USB; deny file system by default
WorkstationMachine trust & patch stateTrusted = yes
User / SessionAuth, roles, MFARole: Physician
Connector ScopeConnector declared needsaudio:mic, audio:stream
Resource BindingSpecific device boundUSB VID/PID
Runtime ConsentPrompt on sensitive accessFirst-time access
AccessLeast-privilege tokenTTL 15 min
Audit & RevocationLogged and revocableRevoke on logout
Access control rules
Default deny for all resources
Connectors receive only explicitly requested resources
Resource access is non-transferable between connectors
Permissions can be time-limited
High-risk actions require user consent or MFA step-up
Immediate revocation is enforced
All access is auditable and traceable
jsonCopy
{
 "connectorId":"dictation-mic",
 "resources":[
  {"type":"audioDevice","deviceId":"USB\VID_0B0E...","access":"read","purpose":"capture-audio"}
 ],
 "expiresIn":"15m"
}
User consent experience
Dictation Microphone
Connector wants to access your microphone and foot pedal.
Revocation & limitations
Revoke now — immediately stop connector and close streams
Limit access — change resource scope
Expire access — automatic expiry after time limit
Revoke on logout — remove session access
Administrator controls
Global policies
Connector allowlist
Resource allowlist / denylist
Approval workflows
Audit & compliance export