Sign In As and Delegate Login in Canopy
Two ways to access a child customer's apps in Canopy: Delegate Login for Canopy and Builder, and Sign In As for ThreoAI from a customer's Accounts tab.
There are two ways to access a child customer’s applications from Canopy, and which one you use depends on the app:
- Delegate Login accesses Canopy (the admin portal itself) and Builder.
- Sign In As accesses ThreoAI, and is reached from a customer’s Accounts tab.
Both open the target application with the appropriate access so you can troubleshoot, verify configuration, or provide support. You can only access child-customer apps this way, not your own users.
Prerequisites
Section titled “Prerequisites”- Access to Canopy
- Administrative permissions
Section A: Delegate Login (Canopy and Builder)
Section titled “Section A: Delegate Login (Canopy and Builder)”Delegate Login is how you step into a child customer’s Canopy or Builder with delegated access.
- Click Customers in the left sidebar
- Locate the child customer and click the ellipsis (three dots) to open the customer’s detail page
- Go to the Accounts tab and select the app sub-tab for the target (Tenant Management or ThreoBuilder)
- Select Delegate Login to open that customer’s Canopy or Builder with delegated access
The Canopy Dashboard also offers a one-click delegate switch into a child tenant, so you can jump in without navigating through Customers first.
Section B: Sign In As (ThreoAI)
Section titled “Section B: Sign In As (ThreoAI)”Sign In As is the ThreoAI-only flow, reached from the customer’s Accounts tab.
- Click Customers in the left sidebar
- Locate the child customer and click the ellipsis (three dots) to open the customer’s detail page
- Go to the Accounts tab
- Select Sign In As next to the user whose ThreoAI you want to access
ThreoAI opens with that user’s access so you can see and verify what they see.
Important Notes
Section titled “Important Notes”- You can only access child-customer apps, not your own users
- Each application is accessed through the flow that applies to it:
| Application | How you access it |
|---|---|
| Canopy | Delegate Login |
| Builder | Delegate Login |
| ThreoAI | Sign In As (Customers → detail → Accounts) |
- A new browser window opens for the session
Troubleshooting
Section titled “Troubleshooting”| Issue | Cause | Fix |
|---|---|---|
| Sign In As or Delegate Login not visible | Insufficient administrative permissions | Verify your account has the Owner or Admin role in Canopy |
| New window doesn’t open | Browser pop-up blocker is active | Allow pop-ups from the Canopy site in your browser settings |
| Session shows incorrect permissions | The target user lacks the expected app permission | Check and update the user’s permissions on the Users tab before trying again |
| Cannot find the user in the list | User belongs to a different customer level | Ensure you opened the correct customer tenant before looking for the user |
Can I access apps in my own (parent) tenant this way? No. Both Delegate Login and Sign In As are only available for child-customer apps. You cannot access accounts within the same tenant you administer.
Which flow do I use for ThreoAI? Use Sign In As, reached from the customer’s Accounts tab. Delegate Login covers Canopy and Builder, not ThreoAI.
Does the user know they are being accessed? The platform does not send a notification to the user. The session is created silently for support and troubleshooting purposes.
How do I end the session? Close the window that opened. The session ends automatically when the window is closed. Your original Canopy session is not affected.