diff --git a/docs/pages/access-controls/guides/moderated-sessions.mdx b/docs/pages/access-controls/guides/moderated-sessions.mdx index c7816032a9c78..32736f85a877c 100644 --- a/docs/pages/access-controls/guides/moderated-sessions.mdx +++ b/docs/pages/access-controls/guides/moderated-sessions.mdx @@ -233,6 +233,24 @@ comma-separated list of usernames. This information can be picked up by a third party integration and may for example be used to enable notifications over some external communication system. +## File transfers + +File transfers within moderated sessions are available via the Web UI only. When initiating a file transfer, if the +current active session requires moderation, a file transfer request will automatically be sent to all current party members. + +Both the session originator and the moderator(s) must be present in the Web UI during the file transfer initiation to receive +the file transfer request notification. Once the file transfer has been requested, all members of the party will be notified +and prompted with an Approve/Deny dialog. + +![Approve/Deny Prompt](https://github.com/gravitational/teleport/assets/5201977/49e11b8c-4729-42b4-a83c-9db7dfa25b74) + + +If a moderator denies the file transfer request, the request is immediately removed and all party members are notified. + +After enough approvals have been given to satisfy the policy (the same policy to start the session), the file transfer +will automatically begin. + + ## RFD - [Moderated Sessions](https://github.com/gravitational/teleport/blob/master/rfd/0043-kubeaccess-multiparty.md) diff --git a/docs/pages/reference/cli.mdx b/docs/pages/reference/cli.mdx index 77782f7584db3..1c0371175cbcc 100644 --- a/docs/pages/reference/cli.mdx +++ b/docs/pages/reference/cli.mdx @@ -829,6 +829,9 @@ Run `tsh help ` or see the [Global Flags section](#tsh-global-flags) ```code $ tsh --proxy=proxy.example.com scp example.txt user@host:/destination/dir ``` + + `tsh scp` will not work from the CLI if the user requires session moderation. You can transfer files in a moderated session by joining the SSH session from the Web UI and requesting the file transfer there. Both the session initiator and moderators must be present in the Web UI in order to approve the file transfer request. + ### tsh ls