Is there an architecture overview for this case?

> Software vendors: they like Teleport for providing remote support of their products. Teleport can be used as a “remote control” to assist their customers with any issues of their software installed and running on-premise.

How does the customer control access to the app deployed on their premise?

Thanks!