Why workspaces
- Isolation — separate environments (dev, staging, production), teams, or projects each get their own agents, credentials, and settings.
- Multi-cloud structure — each workspace targets one primary cloud provider, so you can run AWS, GCP, and Azure operations side by side in separate workspaces.
- Access control — grant members access per workspace, with optional role overrides for fine-grained permissions.
- Organized resources — agents, connections, knowledge bases, and operation history stay scoped to the workspace where they belong.
Create a workspace
Only organization Owners and Admins can create workspaces.1
Open your organization
Go to the Organizations page and find your organization.
2
Click New workspace
Click New workspace on your organization card.
3
Select a cloud provider
Choose the primary cloud infrastructure provider for this workspace.
4
Enter workspace details
Provide a clear, descriptive name (for example “Production AWS” or “Dev Team GCP”) and a description of the workspace purpose, then create the workspace.
Provider options
What lives in a workspace
Each workspace maintains its own set of resources:
Switch between workspaces with the workspace selector; each workspace keeps its own agents, connections, and settings, so nothing leaks between environments.
Workspace access
Access is managed through your organization role:
Owners and Admins see every workspace automatically. Developers and Viewers must be assigned to specific workspaces, and each assignment can either inherit their organization role or use an Admin, Developer, or Viewer override for that workspace only.
Grant workspace access
1
Open organization members
Go to Admin Settings → Organization and scroll to the Members section.
2
Edit workspace access
Find the Developer or Viewer, then click the grid icon next to their name to open workspace access settings.
3
Toggle workspaces
Check or uncheck workspaces to grant or revoke access.
4
Set a role and save
For each workspace, keep Inherit from Org or choose a role override, then click Save.
Role overrides allow fine-grained control. For example, an organization Viewer can be given Developer access to one workspace where they need to run operations. To invite new members, see organization members.
Common workspace patterns
Whichever pattern you choose, use consistent naming across workspaces, follow least privilege when assigning access, and clean up workspaces you no longer use.
Related
Manage organization
Configure organization settings, billing, and member management
Configure agents
Set up AI agents for your workspace operations