Administration
Workspace administration
Manage users, groups, templates, and security policies in one place.
7 min · Admins, IT managers
Workspace administration covers user management, permission groups, template governance, and security policy — all in one place.
Roles
Workspace roles
Owner
Full control
- •Unrestricted access to the entire workspace.
- •Sets the plan, transfers ownership, and manages admins.
- •The only role that can restrict an Admin with an exception rule.
Admin
Day-to-day management
- •Full access by default: sees and manages all flows, folders, and runs.
- •Invites people, creates groups, and grants permissions.
- •Can only be restricted by an exception created by the Owner.
Member
Tailored access
- •Starts with no access to flows and folders.
- •Receives only what is granted via preset, folder, flow, or group.
- •Can always act on what they created or were assigned to.
Users
Invite and configure a new user
- 1
Go to Settings > Users > Invite
Open workspace settings and click Invite in the Users tab.
- 2
Enter email and set initial role
Fill in the invitee's email and select the initial role: Owner, Admin, or Member.
- 3
Optionally add the user to groups
Select one or more groups so the user automatically inherits the corresponding permissions.
- 4
User receives the invite
The invitee receives an email with the access link, creates a password, and lands in the configured workspace.
Groups
User groups
- Create named groups — Finance Approvers, Regional Managers, IT Reviewers — name them according to your structure.
- Assign to the group, not individuals — Task ownership and flow access can be granted to the entire group.
- Update once, reflects across all Flows — Add or remove members from the group and every Flow that references it reflects the change.
- Available on Business and Enterprise plans — User groups require Business plan or higher.
Advanced security
SSO
Okta, Azure AD, Google Workspace
Integrate via SAML 2.0 or OIDC. Users authenticate with corporate credentials. Admins can enforce SSO: members without an active session cannot access the workspace. Available on Enterprise plan.
Template lifecycle
Draft, Active, and Archived
Only Active templates launch new runs. In-progress runs continue on the previous version when editing. Clone to test changes in draft before promoting to production.
Can I remove a user mid-run?
Yes. Open tasks are automatically reassigned to the run owner.
What happens to runs owned by a removed user?
Runs remain active. Ownership transfers to an Admin.
Can I enforce MFA organization-wide?
Yes, in Settings > Security > MFA Policy.
How many Admins can I have?
No hard limit. Each Admin has full workspace access by default.
Can Members see each other's runs?
Only if explicitly granted access to the relevant Flow or folder.
Configure your workspace securely
Manage users, groups, and access policies from a central location.