Running the engagement from the dashboard

Everything here happens on your organization's home page in the dashboard. During setup it leads with a Get set up checklist that walks the rollout top to bottom, with each action on the step it belongs to and a check that fills in as each step is satisfied; below it sit the roster and devices. flowscope creates the organization and grants you access, and your contact can run any step with you.

1. Get the desktop application installer

Download the desktop application installer here; this is the file IT pushes to the fleet through Intune. The guide IT follows is Deploying the desktop application with Microsoft Intune, and the egress destinations to allow are in Network and security requirements.

2. Set up the browser extension

The browser extension is not a download: it force-installs by browser policy from flowscope's self-hosted build, so IT points the policy at flowscope's update manifest and it installs with no per-person action. The full steps, the extension ID and manifest URL, and the self-serve path are in Rolling out the browser extension.

3. Mark deployment done

Once IT has pushed each piece to the fleet, flip the Desktop application (Intune) and Extension (browser policy) switches. Both must be on before you can add your team: until then the Add employee action stays disabled, so nobody is invited to open software that is not on their machine yet.

4. Add your team

Use Add employee to add each participant by work email. Because flowscope is already on their machines from the rollout above, each person is emailed their pairing link the moment you add them. You can work through the whole roster here, with each row filling in once that person signs in.

When someone has not paired yet, the Resend control on their pending invitation and the Remind control on their roster row re-deliver the nudge, so there is no separate batch step to remember. Each recipient signs in, accepts the agreement, and pairs their device, which then sits idle, capturing nothing, until flowscope begins capture.

Watch the fleet come online

As participants sign in and pair, the Your team table fills in:

• EULA reads not yet, accepted, or stale (accepted an older version than the one in force).
• Devices lists each paired device with its platform, desktop application version, capture-health indicator, and last check-in. A device quiet for more than about ten minutes is flagged.
• The capture-health indicator reads ok, or flags permission denied or error (most often the desktop application needs reopening, or UI Automation has not attached yet). A flagged device usually just needs the participant to reopen the app and follow its prompts.

Pending invitations sit in their own section, and you can cancel one sent in error.

A device that has paired is online but is not yet capturing anything: the whole fleet stays idle through setup and starts capturing together when flowscope begins capture.

Capture begins

flowscope begins capture when your engagement starts. Every paired device then begins capturing within a few minutes. A person you add later starts capturing as soon as they pair. In the product, every person shows as a masked letter label like Person A by default. The AI that builds the map works with these labels.

Revoke a device

Revoking a device from its row disables its credential immediately: it stops capturing and cannot upload. Someone who needs to return pairs again, which issues a fresh device.

The running phase is covered in While the engagement is running.

Review the app allowlist

Capture stays inside your organization's App allowlist, so the allowlist page is where you decide the scope. flowscope proposes the list from the systems you named, and keeps proposing as capture runs: business systems that fall inside the workflow scope you confirmed are added for you, and anything flowscope cannot place with confidence waits for your decision. Once capture begins, flowscope emails your admins when new items are waiting for review.

Adding a system never turns on screen capture; screen capture for your organization is its own switch on the same page, and off means no application is captured by screenshot. If you would rather decide every app yourself, switch the automatic additions off on the same page; from then on every new app waits for your decision, and nothing already on the list changes.

Revealing real names

In the product, every person shows as a masked letter label like Person A by default. From the settings gear in the top right of your organization's home page, an admin can turn real names on for their own screen. flowscope staff can do the same. The system records every reveal, so there is an audit trail of who saw real names and when. The AI that builds the map works with the letter labels.

Capture scope

What the software may observe (your organization's allowlist) and what it never observes (your organization's exclusion list, which starts from flowscope's default list and which your admins edit on the Denylist page) are part of the agreed configuration.

Updates

The desktop application and the browser extension update themselves. An admin can hold your organization's fleet on its current version from the dashboard; while held, no device of your organization moves to a newer version, and lifting the hold lets them update on their next check. Participants can see the scope that applies to them, pause and resume capture, and remove the software. The participant view is in Your privacy and controls.