#Active Sessions

4 min read
RoleAccess LevelLocation
Client AdminManage own sessionsAccount → Security (/account?section=security); also the deep link /settings?section=active-sessions
Client ManagerManage own sessionsAccount → Security (/account?section=security)
Client StaffManage own sessionsAccount → Security (/account?section=security)

#Overview

The Active Sessions panel lets you review the portal sessions currently signed in to your account across devices and browsers. You can sign out any non-current session you no longer recognise, or sign out all other devices while keeping the device you are using now signed in.

This panel manages only your own sessions. There is no customer-facing way to view or end another user's sessions — see Managing Another User's Sessions below.

Partner roles do not have access to the Active Sessions surface. The session routes (/api/auth/sessions, /api/auth/sessions/[sessionId]/revoke, and /api/auth/sessions/revoke-others) return a not-found state for partner_admin and partner_user.

#Open Active Sessions

For all client roles, the Active Sessions panel lives under your Account area:

  1. Open your Account page.
  2. Select the Security tab (/account?section=security). The Active Sessions panel is shown alongside your security methods.

Client Admin can also open the panel through the Settings deep link /settings?section=active-sessions. This section is not shown in the visible Client Admin Settings sidebar; open it with its direct link. For Client Manager and Client Staff, that /settings deep link is not available and returns a not-found state — use the Account → Security route above.

Legacy links using /settings?section=session-management still resolve: the portal normalises the alias to the canonical active-sessions slug (there is no separate redirect target). For Client Manager and Client Staff the legacy alias also returns a not-found state under /settings, matching the relocated active-sessions behaviour.

#Viewing Your Sessions

Each session shows a customer-safe device label, the IP address it connected from (or Unknown location when no address is available), a device class, the created time, and the last active time. The portal substitutes a generic Portal session label when AiDial can only return a raw session, browser, or operating-system identifier rather than a recognisable device description.

Sessions that share the same browser, IP address, and recent activity window are grouped together under a single heading to keep the list readable.

The current session is labelled Current session and has no Sign out control in this list. Use the normal portal sign-out to end the browser you are using now.

If the list cannot be loaded, the panel shows a message and a Retry control to try again.

#Signing Out Sessions

Use Sign out next to a non-current session, review the device summary, and confirm to end that session. Select Cancel or press Escape to leave it signed in. Use Sign out all other devices to end every other active session while keeping your current browser signed in; that button appears only while at least one other session is listed.

#Managing Another User's Sessions

Viewing or ending another user's sessions is not available to any customer role, and partner roles have no session surface at all. It is an AiDial administrator action. If a colleague's account needs to be signed out everywhere, contact your AiDial partner.

You can always sign out your own sessions from this panel or with the normal portal sign-out control.

#Security and Scope

The Active Sessions panel uses your signed-in portal session. You do not need to enter or send an API key.

Session listing and sign-out requests are resolved server-side against your own account; the session identifiers you see cannot be used to reach another account. Sign-out requests are rate-limited to 20 per minute for your account — if you reach that limit, wait a moment and try again.