Operator Quick Reference
Use this page as a compact reminder after you already know the fuller workflows.
Start Here
Section titled “Start Here”- Need shell orientation: Sign in and get oriented
- Need account context: Account and organization
- Need the main endpoint path: Run your first endpoint session
- Need enrollment help: Install an endpoint agent
- Need self-healing context: Self-healing and Sentinel
- Need billing help: Set up billing, Manage billing issues
- Need terminology help: Glossary
Core Routes
Section titled “Core Routes”Home: confirm overall service health throughOperations SnapshotEndpoints: find machines, open endpoint details, and hand off intoOpen SessionsIT Knowledge Base: browse native and imported documents or manage import sourcesGuardrails: manage reusable guardrail policies and published template versionsEndpoint Local Web: open locally from the endpoint tray or taskbar for enrollment recovery, Status, Logs, and Settings
Endpoint Workflow Reminders
Section titled “Endpoint Workflow Reminders”- Use
Search, OS filters, andApplyonEndpointsbefore opening a machine. - Use
Open Sessionsfrom endpoint details when you need live investigation instead of static state review. - In the session workspace, start with a
Guardrail template, then useStart Session. - Watch the session-state chips,
Live endpoint intelligence, andAgent worklogtogether while a session is active. - Check the endpoint detail
Sentinelpanel before opening live sessions when the endpoint may already have self-healing context. - If an endpoint looks stale, check
Last Seen, Sentinel status, Diagnostics, and whether live endpoint intelligence reports a stale or unavailable frame before escalating.
Self-Healing Reminders
Section titled “Self-Healing Reminders”Endpoint Self-Healingsplits endpoint context intoStatus,Sessions,Sentinel,Run history,Escalations,Activity, andKnowledge.- Use
Regenerate Sentinelfrom theSentinelview. The endpoint self-healing workspace does not have a top-levelRefreshaction. - Endpoint
Knowledgeis a single document, not a proposal queue. EscalationRejectstill requires a reason.
Policy And Admin Reminders
Section titled “Policy And Admin Reminders”Guardrailsis the template inventory; opening a row takes you to the policy builder.- Review the policy builder overview matrix before publishing so platform support, explicit defaults, and unavailable rule families are clear.
- Use
Historyto restore an older published v2 version into the draft; it does not publish until you review and publish the restored draft. - Clone a template when you want a distinct starting point; delete requires an exact-name confirmation.
IT Knowledge Basesplits intoDocumentsandImport Sources.- Imported knowledge content is read-only inside Pharaoh.
- Endpoint Local Web is local-only, opens explicitly from the endpoint, shuts down after 30 minutes idle by default, and must redact secrets in status, logs, settings, exports, screenshots, and errors.
- Create Playbooks for repeatable prompts that operators should reuse, but keep environment-specific facts in the IT Knowledge Base.
Account And Scope Checks
Section titled “Account And Scope Checks”- Confirm the current organization from the user menu before doing scoped work.
- Use
User ProfileandOrganization Settingswhen a workflow depends on the active tenant or membership context. - Use
Billingwhen setup, payment, provider credential, subscription, or spend-limit state blocks billable work. - Expect admin-only surfaces to warn clearly when your current role is insufficient.