A distributor or reseller relationship identifies a commercial path. It does not automatically authorize access to every downstream customer’s telemetry, credentials or user administration. Keep end-customer workspaces durable and separate.
Define operational grants explicitly: which partner may see which customer summaries or reports, for what reason and until when. Customer owners retain authority. Test sibling resellers and revoked access, including cached responses and old report downloads.
Brand inheritance should change presentation through safe names, assets and design tokens. It must not change immutable IDs, authorization, third-party sign-in logos or the actual signing publisher of an installer. Arbitrary script or CSS is not a branding feature.
Custom domains need ownership, certificate and routing verification before activation. Sender domains need verification before email is sent from them. If those steps are incomplete, use the approved AOT delivery domain and describe the limitation truthfully.
Prepared with AI assistance and checked against supported collection and reporting behavior. Verify device scope and permissions for your environment; no customer outcome or vendor endorsement is implied.