Use separate user accounts and least-privilege access where tools allow. Define what counts as urgent and who approves messages, purchases, or calendar changes. State your time zone and periods when you are unavailable.
List the systems you need, the tasks you will perform, working hours, response expectations, backup coverage, and tasks that require client approval. Use individual accounts and least-privilege access rather than sharing a client's password. Agree a secure way to grant and revoke access, and do not promise continuous availability unless it is part of a supported arrangement.
Keep an access register with the account, permission level, approver, and removal date.
Remove permissions promptly when a task ends and confirm the client can still access their own accounts.
Use named user accounts where possible so access can be traced to a person, and store credentials in an approved password manager. Confirm the client remains the account owner. At handover, revoke your access and ask the client to verify that their recovery method works.
Remove access when the engagement ends. Present your remote support services on KobStore; create a page and explain your working arrangement.
