Workspace Management

Workspace Management provides centralized capabilities for managing users and roles within your workspace. As a Workspace Admin, you can invite team members, monitor workspace health, assign roles, and enforce your organization’s access control policies.

Overview

Section	Purpose
Users	Invite, manage, and monitor users in the workspace
Roles	View and manage the permission framework for workspace and project access

---

Users

The Users feature simplifies workspace administration through centralized tools for inviting, managing, and monitoring users. These tools work together to streamline collaboration, access control, and status monitoring.

Navigation: Workspace Management → Users

Users Dashboard

The Users dashboard provides a comprehensive overview of all users in your workspace and their current status.

Metric	Description
Total Users	The total number of users in the workspace
Active	Users with active accounts who can access the platform
Inactive	Users who have been invited but have not yet accepted
Locked	Users whose accounts have been locked due to failed login attempts

Use the search field to filter users by name or email. Hover over a user row to reveal the actions menu (⋮) with the following options:

Action	Description
Resend Invitation	Available for users with an Inactive status. Use this if a user did not receive the original email
Lock / Unlock User	Temporarily revoke or restore access for security incidents
Remove User	Permanently revokes all access and removes the user from the workspace. This action cannot be undone. To rejoin, the user must be invited again

Invite Users

Invite team members and assign them roles so they can start working within the workspace. The invitation workflow supports adding up to 5 users at a time.

1. Navigate to Workspace Management → Users.
2. Click Invite Users.
3. Enter up to 5 email addresses in the input fields.
4. For each user, select a workspace role from the dropdown: Workspace Admin, Workspace Member, or Workspace Viewer.
5. Optionally, assign the user to specific projects and select a project role.
6. Review the Permissions Summary at the bottom of the modal for a reference of each role’s access levels.
7. Click Send Invitations.

Each invited user receives an automated email with a secure invitation link and onboarding instructions.

• Invitations remain valid for 14 days. If a user does not accept within this period, you must resend the invitation. Users appear as Inactive on the dashboard until they accept.
• Inviting a user as a Workspace Member grants them the ability to create projects, policies, datasets, and evaluations. However, they do not have default access to any project until they are explicitly added through Project Users and Permissions.

---

Roles

The Roles feature allows Workspace Admins to view and manage the permission framework that controls user access across the platform.

The platform uses two types of roles:

Role Type	Scope
Workspace-level roles	Global roles applied across the entire workspace
Project-level roles	Local roles scoped to individual projects

Users can have different roles in different projects. Workspace Admins can override project-level permissions when needed.

Role Management Dashboard

The Role Management dashboard displays the following summary cards:

Card	Description
Total Roles	The total count of system and custom roles
System Roles	The count of predefined, system-generated roles
Custom Roles	The count of roles created by your workspace admins

System-Defined Roles

The platform provides the following default system roles. These roles are preset and cannot be deleted.

Workspace-Level Roles

Role	Permissions
Workspace Admin	Full workspace control. Can manage settings, invite/remove users, assign roles, and create projects. Automatically inherits Project Admin permissions for all projects
Workspace Member	Can create and edit projects, policies, datasets, and evaluations. No access to workspace settings or user management.
Workspace Viewer	Read-only access to workspace resources. Can view projects and dashboards if added as a project member

Workspace users do not have default access to specific projects until added through Project Users and Permissions.

Project-Level Roles

Role	Permissions
Project Admin	Full control within a specific project. Can create and manage all project sub-resources (agents, runs, configurations, datasets)
Project Viewer	Read-only access within an assigned project

Workspace Admins can create new projects and become the Project Admins for those projects. To gain access to other projects within the workspace, they must be manually added by the respective Project Admin.

Permissions Matrix

The following table summarizes the default permissions for each workspace-level role.

Permission	Workspace Admin	Workspace Member	Workspace Viewer
Manage Workspace Settings	Yes	No	No
Invite / Remove Users	Yes	No	No
Assign Roles	Yes	No	No
Create Projects	Yes	Yes	No
Create / Edit Policies	Yes	Yes	No
Create / Edit Datasets	Yes	Yes	No
Create / Edit Evaluations	Yes	Yes	No
View Projects (when added)	Yes	Yes	Yes
View Dashboards	Yes	Yes	Yes

---