> ## Documentation Index
> Fetch the complete documentation index at: https://docs.decisional.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspaces

> Collaborate with your team and manage access

## What Are Workspaces?

A **workspace** is your team's shared environment in Decisional. It contains your agents, sources, integrations, runs, settings, and team members.

<Card title="Think of it like..." icon="lightbulb">
  A workspace is like a **Slack workspace** or **Google Workspace** - a shared space where your team collaborates on automation.
</Card>

***

## Workspace Types

### Personal Workspace

**Created automatically** when you sign up with a personal email (Gmail, Yahoo, etc.).

<CardGroup cols={2}>
  <Card title="Who Uses It" icon="user">
    Individuals, freelancers, small projects
  </Card>

  <Card title="What's Included" icon="box">
    * You're the only member (Owner)
    * All agents are private
    * Personal integrations and credentials
    * Individual billing
  </Card>
</CardGroup>

Integrations connected in a Personal Workspace are only usable by you. Other people cannot join that workspace to reuse those credentials.

**Example:**

* Email: `john.smith@gmail.com`
* Workspace: "John's Workspace"
* Members: Just you

### Organizational Workspace

**Created automatically** when you sign up with a company email domain.

<CardGroup cols={2}>
  <Card title="Who Uses It" icon="building">
    Companies, teams, departments
  </Card>

  <Card title="What's Included" icon="users">
    * Multiple team members
    * Shared agents and resources
    * Team integrations and credentials
    * Centralized billing
    * Audit logs
  </Card>
</CardGroup>

In any non-personal workspace, multiple people can collaborate on the same agents and share approved credentials. This lets a team connect the tools an agent needs once, then use those integrations according to the workspace roles and permissions.

**Example:**

* Email: `sarah@acmecorp.com`
* Workspace: "Acme Corp"
* Members: All employees with @acmecorp.com emails

<Info>
  If you're the first person from your company to sign up, you'll create the organization's workspace. Others who sign up with the same domain will automatically join.
</Info>

<Card title="Credentials" icon="key" href="/guides/credentials">
  Learn how integrations, tools, credentials, and access-control policy work across a workspace.
</Card>

***

## Creating a Workspace

<Tabs>
  <Tab title="Automatic Creation">
    **Happens when you sign up:**

    1. Visit [agents.decisional.com/sign-up](https://agents.decisional.com/sign-up)
    2. Enter your email
    3. Decisional detects your email domain:
       * **Personal domain** (gmail.com) → Personal workspace
       * **Company domain** (yourcompany.com) → Organizational workspace
    4. Workspace is created automatically
    5. You become the workspace **Owner**
  </Tab>

  <Tab title="Join Existing Workspace">
    **If your company already has a workspace:**

    1. Sign up with your company email
    2. Decisional detects existing workspace
    3. You're added as a **Viewer** (default)
    4. Workspace Owner can change your role

    **Or get invited:**

    1. Teammate sends you an invitation
    2. Click the link in the email
    3. Sign up or sign in
    4. You're added with the role specified in the invitation
  </Tab>

  <Tab title="Additional Workspaces">
    **Create multiple workspaces (Professional/Enterprise only):**

    1. Click your profile → **New Workspace**
    2. Enter workspace name
    3. Choose workspace type
    4. Click **Create**

    **Use cases:**

    * Separate workspaces for different teams
    * Staging vs. production environments
    * Client workspaces (agencies)
  </Tab>
</Tabs>

***

## Team Management

### Inviting Members

<Steps>
  <Step title="Navigate to Team Settings">
    Click **Settings → Team** from the sidebar
  </Step>

  <Step title="Click Invite Member">
    Click the **Invite Member** button
  </Step>

  <Step title="Enter Email">
    Type the email address of the person you want to invite
  </Step>

  <Step title="Assign Role">
    Choose their role:

    * **Owner**: Full control (only one allowed)
    * **Admin**: Can manage team and agents
    * **Editor**: Can create and edit agents
    * **Viewer**: Read-only access
  </Step>

  <Step title="Send Invitation">
    Click **Send Invite**

    They'll receive an email with a link to join.
  </Step>
</Steps>

<Tip>
  **Bulk invites:** Enter multiple emails separated by commas to invite many people at once.
</Tip>

### Managing Members

View and manage all workspace members:

| Column          | Description                             |
| --------------- | --------------------------------------- |
| **Name**        | Member's full name                      |
| **Email**       | Their account email                     |
| **Role**        | Current permission level                |
| **Last Active** | When they last used Decisional          |
| **Status**      | Active, Pending Invitation, Deactivated |
| **Actions**     | Change role, Remove, Resend invite      |

**Actions you can take:**

* **Change role**: Click role dropdown → Select new role
* **Remove member**: Click ⋮ menu → Remove
* **Resend invitation**: For pending invites, click ⋮ → Resend
* **Deactivate**: Temporarily disable access without removing

<Warning>
  Only **Owners** and **Admins** can invite and manage team members.
</Warning>

***

## Roles & Permissions

Decisional uses role-based access control (RBAC).

### Permission Matrix

| Permission                    | Owner | Admin | Editor | Viewer |
| ----------------------------- | ----- | ----- | ------ | ------ |
| **View agents**               | ✅     | ✅     | ✅      | ✅      |
| **View sources**              | ✅     | ✅     | ✅      | ✅      |
| **View run history**          | ✅     | ✅     | ✅      | ✅      |
| **Run agents**                | ✅     | ✅     | ✅      | ✅      |
| **Create agents**             | ✅     | ✅     | ✅      | ❌      |
| **Edit agents**               | ✅     | ✅     | ✅      | ❌      |
| **Delete agents**             | ✅     | ✅     | ✅      | ❌      |
| **Upload sources**            | ✅     | ✅     | ✅      | ❌      |
| **Manage integrations**       | ✅     | ✅     | ✅      | ❌      |
| **Invite members**            | ✅     | ✅     | ❌      | ❌      |
| **Remove members**            | ✅     | ✅     | ❌      | ❌      |
| **Change roles**              | ✅     | ✅     | ❌      | ❌      |
| **View billing**              | ✅     | ❌     | ❌      | ❌      |
| **Manage billing**            | ✅     | ❌     | ❌      | ❌      |
| **Change workspace settings** | ✅     | ❌     | ❌      | ❌      |
| **Delete workspace**          | ✅     | ❌     | ❌      | ❌      |
| **Transfer ownership**        | ✅     | ❌     | ❌      | ❌      |
| **View audit logs**           | ✅     | ✅     | ❌      | ❌      |

### Role Descriptions

<AccordionGroup>
  <Accordion title="Owner" icon="crown">
    **Full control over the workspace**

    **Responsibilities:**

    * Manage billing and subscription
    * Delete workspace (permanent!)
    * Transfer ownership to another member
    * Configure workspace-wide settings
    * Approve major changes

    **Limitations:**

    * Only **one Owner** per workspace
    * Cannot remove themselves (must transfer ownership first)

    **Best for:** Workspace creator, executive sponsor, billing admin
  </Accordion>

  <Accordion title="Admin" icon="user-shield">
    **Can manage team and all resources**

    **Responsibilities:**

    * Invite and remove team members
    * Create and configure agents
    * Manage integrations
    * View audit logs
    * Handle day-to-day operations

    **Limitations:**

    * Cannot access billing
    * Cannot delete workspace
    * Cannot change workspace settings

    **Best for:** Team leads, managers, power users
  </Accordion>

  <Accordion title="Editor" icon="pen">
    **Can create and modify agents**

    **Responsibilities:**

    * Build new agents
    * Edit existing agents
    * Upload sources
    * Run agents
    * Manage their own integrations

    **Limitations:**

    * Cannot invite team members
    * Cannot view audit logs
    * Cannot change workspace settings

    **Best for:** Developers, automation builders, analysts
  </Accordion>

  <Accordion title="Viewer" icon="eye">
    **Read-only access + can run agents**

    **Permissions:**

    * View all agents
    * View sources
    * Run agents
    * View run history

    **Limitations:**

    * Cannot create or edit anything
    * Cannot upload sources
    * Cannot manage integrations
    * Cannot invite team members

    **Best for:** Stakeholders, executives, external collaborators
  </Accordion>
</AccordionGroup>

### Changing Roles

<Steps>
  <Step title="Go to Team Settings">
    Settings → Team
  </Step>

  <Step title="Find the Member">
    Locate the person in the team list
  </Step>

  <Step title="Click Role Dropdown">
    Click the current role next to their name
  </Step>

  <Step title="Select New Role">
    Choose the new role from the dropdown
  </Step>

  <Step title="Confirm">
    Changes take effect immediately
  </Step>
</Steps>

<Warning>
  **Downgrading yourself:** If you're an Admin and downgrade yourself to Editor, you won't be able to change roles anymore!
</Warning>

***

## Workspace Settings

Configure workspace-wide options.

### General Settings

<AccordionGroup>
  <Accordion title="Workspace Name" icon="signature">
    **Change your workspace display name:**

    1. Settings → General
    2. Edit "Workspace Name"
    3. Click Save

    **Example:** "Acme Corp" → "Acme Corp - Sales Team"
  </Accordion>

  <Accordion title="Default Timezone" icon="clock">
    **Set timezone for scheduled agents:**

    1. Settings → General
    2. Select timezone (e.g., "America/New\_York")
    3. Click Save

    **Affects:**

    * Scheduled run times
    * Timestamps in logs
    * Run history dates
  </Accordion>

  <Accordion title="Workspace Icon" icon="image">
    **Upload custom workspace icon:**

    1. Settings → General
    2. Click "Upload Icon"
    3. Select image (PNG, JPG, max 1MB)
    4. Crop to square
    5. Save

    **Appears in:**

    * Sidebar
    * Workspace switcher
    * Team member invitations
  </Accordion>
</AccordionGroup>

### Notification Settings

Configure workspace-wide notification preferences.

<Tabs>
  <Tab title="Email Notifications">
    **Send email alerts to team members:**

    **Options:**

    * Agent run completed
    * Agent run failed
    * Agent needs review
    * New member joined
    * Billing updates

    **Per-user override:** Members can customize their own notification preferences
  </Tab>

  <Tab title="Slack Notifications">
    **Post updates to Slack channels:**

    **Setup:**

    1. Connect Slack integration
    2. Settings → Notifications → Slack
    3. Select default channel (e.g., #automation-logs)
    4. Choose events to post

    **Events:**

    * All agents completed
    * Only failed agents
    * Agents needing review
    * Daily summary digest
  </Tab>

  <Tab title="Webhook Notifications">
    **Call your API for workspace events:**

    **Setup:**

    1. Settings → Notifications → Webhooks
    2. Add webhook URL
    3. Select events

    **Payload example:**

    ```json theme={null}
    {
      "event": "workspace.member_added",
      "workspace_id": "ws_abc123",
      "member": {
        "email": "new.person@acme.com",
        "role": "Editor"
      },
      "timestamp": "2025-01-15T14:30:00Z"
    }
    ```
  </Tab>
</Tabs>

***

## Billing & Plans

Manage your workspace subscription.

### Viewing Billing

<Steps>
  <Step title="Navigate to Billing">
    Settings → Billing (Owner only)
  </Step>

  <Step title="View Current Plan">
    See your active plan:

    * Plan name (Free, Professional, Enterprise)
    * Monthly cost
    * Included runs
    * Billing cycle
  </Step>

  <Step title="Check Usage">
    Monitor current usage:

    * Runs used this month
    * Team members
    * Active agents
    * Storage used
  </Step>
</Steps>

### Upgrading/Downgrading

<Tabs>
  <Tab title="Upgrade">
    **Move to a higher plan:**

    1. Settings → Billing → Upgrade
    2. Choose new plan
    3. Enter payment details (if not already on file)
    4. Confirm

    **Takes effect:** Immediately

    **Billing:** Prorated charge for remainder of current period
  </Tab>

  <Tab title="Downgrade">
    **Move to a lower plan:**

    1. Settings → Billing → Change Plan
    2. Select lower tier
    3. Review what you'll lose (e.g., extra team members)
    4. Confirm

    **Takes effect:** End of current billing period

    **Refund:** No refund for remainder of current period
  </Tab>

  <Tab title="Cancel">
    **Cancel subscription:**

    1. Settings → Billing → Cancel Subscription
    2. Select reason (helps us improve)
    3. Confirm cancellation

    **What happens:**

    * Access continues until end of billing period
    * All data remains accessible
    * Can reactivate anytime
    * After 90 days of inactivity, workspace is archived

    **Before canceling:**

    * Export run records
    * Export agent configurations
    * Save any important data
  </Tab>
</Tabs>

### Payment Methods

<AccordionGroup>
  <Accordion title="Add Payment Method" icon="credit-card">
    1. Settings → Billing → Payment Methods
    2. Click "Add Payment Method"
    3. Enter card details
    4. Set as default (optional)
    5. Save

    **Accepted:**

    * Visa, Mastercard, Amex, Discover
    * Debit cards
    * Corporate cards
  </Accordion>

  <Accordion title="Update Billing Email" icon="envelope">
    **Change where invoices are sent:**

    1. Settings → Billing → Billing Email
    2. Enter new email
    3. Verify email
    4. Save

    **Invoices sent to this email:**

    * Monthly invoices
    * Payment receipts
    * Payment failures
  </Accordion>

  <Accordion title="View Invoices" icon="file-invoice">
    **Access past invoices:**

    1. Settings → Billing → Invoice History
    2. See all past invoices
    3. Click to download PDF
    4. Filter by date range

    **Includes:**

    * Invoice number
    * Date
    * Amount paid
    * Payment method
    * Download PDF
  </Accordion>
</AccordionGroup>

***

## Security

### Workspace Security Settings

<AccordionGroup>
  <Accordion title="Two-Factor Authentication (2FA)" icon="shield">
    **Require 2FA for all workspace members:**

    1. Settings → Security
    2. Toggle "Require 2FA" ON
    3. Set grace period (e.g., 7 days)
    4. Save

    **What happens:**

    * All members must enable 2FA within grace period
    * Cannot sign in without 2FA after deadline
    * New members must enable 2FA before accessing workspace

    **Available on:** Professional and Enterprise plans
  </Accordion>

  <Accordion title="Session Timeout" icon="clock">
    **Auto-logout after inactivity:**

    1. Settings → Security → Session Timeout
    2. Set duration (15 min, 30 min, 1 hour, 4 hours, Never)
    3. Save

    **Applies to:** All workspace members

    **Recommended:** 1 hour for high-security environments
  </Accordion>

  <Accordion title="IP Whitelisting" icon="network-wired">
    **Restrict access to specific IP addresses:**

    1. Settings → Security → IP Whitelisting
    2. Add allowed IP ranges
    3. Save

    **Format:**

    * Single IP: `203.0.113.0`
    * Range: `203.0.113.0/24`

    **Use case:** Corporate network, VPN-only access

    **Available on:** Enterprise plan only
  </Accordion>

  <Accordion title="SSO (Single Sign-On)" icon="id-card">
    **Use your corporate identity provider:**

    **Supported providers:**

    * SAML 2.0
    * OpenID Connect (OIDC)
    * Okta
    * Azure AD
    * Google Workspace

    **Setup:**
    Contact [founders@decisional.com](mailto:founders@decisional.com) for SSO configuration

    **Available on:** Enterprise plan only
  </Accordion>
</AccordionGroup>

### Audit Logs

Track all activity in your workspace (Professional/Enterprise only).

**What's logged:**

* Member added/removed
* Role changes
* Agent created/edited/deleted
* Integration connected/disconnected
* Source uploaded/modified
* Settings changed

**View logs:**

1. Settings → Audit Logs
2. Filter by:
   * Date range
   * Member
   * Action type
   * Resource (agent, source, integration, etc.)
3. Export to CSV

**Example log entry:**

```
[2025-01-15 14:30:22] sarah@acme.com
Action: agent.created
Resource: Quote Generation Agent (agent_abc123)
Details: Created new agent with Gmail integration
IP: 203.0.113.42
```

***

## Switching Workspaces

If you're a member of multiple workspaces:

<Steps>
  <Step title="Click Workspace Switcher">
    Click the workspace name in the top-left corner
  </Step>

  <Step title="Select Workspace">
    Choose which workspace to switch to
  </Step>

  <Step title="Context Switches">
    All agents, sources, integrations, and settings now reflect the selected workspace
  </Step>
</Steps>

<Info>
  **Each workspace is completely separate.** Agents, sources, and integrations are not shared between workspaces.
</Info>

***

## Transferring Ownership

**Only the Owner can transfer ownership to another member:**

<Steps>
  <Step title="Navigate to Team Settings">
    Settings → Team
  </Step>

  <Step title="Find New Owner">
    Locate the member who will become the new Owner
  </Step>

  <Step title="Click Transfer Ownership">
    Click ⋮ menu next to their name → Transfer Ownership
  </Step>

  <Step title="Confirm Transfer">
    **Warning:** This cannot be undone!

    Type "TRANSFER" to confirm
  </Step>

  <Step title="You Become Admin">
    Ownership transfers immediately

    You become an Admin automatically
  </Step>
</Steps>

<Warning>
  **Cannot be reversed!** The new Owner must transfer it back to you if needed.
</Warning>

***

## Deleting a Workspace

**Only the Owner can delete a workspace. This is permanent!**

<Steps>
  <Step title="Navigate to Settings">
    Settings → Danger Zone
  </Step>

  <Step title="Click Delete Workspace">
    Scroll to bottom → Delete Workspace
  </Step>

  <Step title="Understand Consequences">
    **What gets deleted:**

    * All agents (permanently)
    * All sources (permanently)
    * All run history (permanently)
    * All team members removed
    * All integrations disconnected

    **Cannot be recovered after 30 days!**
  </Step>

  <Step title="Export Your Data">
    **Before deleting, download:**

    * Agent configurations (Export as JSON)
    * Run logs (if needed for compliance)
  </Step>

  <Step title="Type Workspace Name">
    Type the exact workspace name to confirm
  </Step>

  <Step title="Delete">
    Workspace is immediately deactivated

    Data retained for 30 days, then permanently deleted
  </Step>
</Steps>

***

## Best Practices

<Check>
  **Assign appropriate roles:** Give people the minimum permissions they need
</Check>

<Check>
  **Enable 2FA:** Require it for all workspace members
</Check>

<Check>
  **Regular audits:** Review team members quarterly, remove inactive users
</Check>

<Check>
  **Separate workspaces:** Use different workspaces for staging and production
</Check>

<Check>
  **Document processes:** Create internal docs for how your team uses Decisional
</Check>

<Check>
  **Monitor usage:** Check billing dashboard monthly to avoid surprises
</Check>

<Check>
  **Backup critical data:** Export agent configs, sources, and run records regularly
</Check>

***

## Troubleshooting

<AccordionGroup>
  <Accordion title="Can't invite team member" icon="user-xmark">
    **Possible causes:**

    1. **Not an Admin/Owner:** Only Admins and Owners can invite
    2. **Plan limit:** Free plan limited to 3 members
    3. **Email already in use:** They're already in the workspace

    **Fix:**

    * Ask an Admin/Owner to invite
    * Upgrade plan for more members
    * Check team list for existing member
  </Accordion>

  <Accordion title="Workspace not showing up" icon="eye-slash">
    **Possible causes:**

    1. **Wrong email:** Sign in with the email that was invited
    2. **Invitation expired:** Ask for a new invitation
    3. **Not yet accepted:** Check email for invitation link

    **Fix:**

    * Sign out and sign in with correct email
    * Contact workspace Admin for new invite
  </Accordion>

  <Accordion title="Can't change role" icon="lock">
    **Possible causes:**

    1. **Insufficient permissions:** Only Admins/Owners can change roles
    2. **Trying to change Owner:** Owner role can only be transferred, not changed
    3. **Changing your own role:** Can't promote yourself

    **Fix:**

    * Ask an Admin/Owner to change the role
    * Use "Transfer Ownership" for Owner role
  </Accordion>
</AccordionGroup>

***

## Next Steps

<CardGroup cols={2}>
  <Card title="Setup Guide" icon="gear" href="/setup">
    Complete workspace setup walkthrough
  </Card>

  <Card title="Inviting Team Members" icon="user-plus" href="/setup#step-3-set-up-your-first-workspace">
    Step-by-step invitation guide
  </Card>

  <Card title="Working with Agents" icon="robot" href="/guides/agents">
    Start building automation as a team
  </Card>

  <Card title="Security Settings" icon="shield" href="/setup#step-7-security-best-practices">
    Configure 2FA and security features
  </Card>
</CardGroup>