Sharing system access using a device

Abstract

Techniques are disclosed relating to sharing an access credential. In various embodiments, sharee device receives an access credential shared by a sharer device to obtain access to a system. The sharee device determines a policy based on a server-based device (SBxD) certificate included in the access credential and performs an action in accordance with the determined policy. In some embodiments, the policy specifies a restricted set of access rights for the system. The sharee device presents, in accordance with the policy, the access credential to the system. In some embodiments, the action includes the sharee device providing information to a remote server. In some embodiments, the sharee device identifies an access credential class defined by class information included in the access credential and performs an action in accordance with the determined policy and the identified access credential class.