| Who operates the tools | Customer team administers its licensed workspace | TLS operates the agreed managed service |
|---|
| User access | Named users, company roles and delegates | Approved client contacts and service access |
|---|
| Ticketing | Separate company helpdesk and internal notes | TLS service requests, technician responses and history |
|---|
| Knowledge | Company articles and runbooks; scoped administration | Published TLS guidance and service-specific documentation |
|---|
| Password management | Encrypted shared company vault; role-gated reveal and Trash | TLS credential handling within the agreed service; no shared workspace-vault administration included |
|---|
| MFA | Mandatory client authenticator / recovery flow | Mandatory client authenticator / recovery flow |
|---|
| Company SSO and provisioning | Microsoft, Google, Okta, OneLogin; SAML and scoped SCIM after setup | Same configured identity options for approved support clients |
|---|
| Device allowance | Standard 1/user; Professional 3/user; Enterprise no plan cap | Standard 1/user; Professional 3/user; Enterprise no plan cap |
|---|
| RMM and patch operations | Licensed device tools; real agent acceptance required | TLS-managed operations within service scope; real agent acceptance required |
|---|
| Integrations | Plan eligibility, roles, provider consent and verification | TLS-managed connectors within the service agreement |
|---|
| Vendor license visibility | Company catalog, inventory and permitted administration | Read-only Microsoft / Google visibility and TLS assistance |
|---|
| Clean Dev | Professional up to 5 test users; Enterprise up to 10; provisioned separately | Not included; Company Workspace is a separate product |
|---|
| QA replica | Optional $79/month after provision and acceptance | Separately quoted; not included in Managed IT price |
|---|
| Storage | Recorded file usage and TLS planning budgets; allocations must be confirmed | Service-related file usage; allowances specified in the signed order |
|---|
| Mobile | Responsive portal; native iOS/Android full-capability acceptance remains pending | Responsive portal; native iOS/Android full-capability acceptance remains pending |
|---|
| Recovery | 60-day local account/ticket recycle windows; separate retention rules | 60-day local account recycle window; service and legal records retained separately |
|---|
| Commercial terms | Minimum 10 users; monthly or prepaid 12/24/36 months | Minimum 5 supported users; monthly or prepaid 12/24/36 months |
|---|