What a Workspace Contains

This page details the resources scoped to a Workspace and the resources that live at the site level. See Workspaces for an overview of what Workspaces are and when to use them.

Workspace Root Folder

The Workspace Root folder restricts all Workspace users to one section of your site and prevents them from accessing anything outside of the Workspace Root folder path. When a Workspace user connects, they see the Workspace Root folder as the top level of the site. This restriction applies regardless of how the users connect, whether through the Web App, API, Desktop App, Mobile App, FTP, SFTP, WebDAV, or CLI.

Workspace Administrators have full administrative access to all folders within the Workspace Root. They assign folder permissions to Workspace users, groups, and partners. Permissions can only grant access to folders within the Workspace Root. Users, groups, and partners within a Workspace have access only to folders that the Workspace Administrator has explicitly assigned to them.

Site Administrators can also assign folder permissions on any Workspace folder to any user on the site, including standard users on the main site. When a standard user on the main site receives a folder permission on a Workspace folder, they continue to see all their main site resources when they log in. To access the Workspace folder, they switch to that Workspace after logging in. A user can receive folder permissions from more than one Workspace.

Scoped Resources

The Workspace Administrator or Site Administrator can create and configure the following resources within a Workspace on a self-service basis. All resources are scoped to the Workspace and isolated from other Workspaces and from the main site.

Site-Level Resources

Storage and bandwidth usage, site-wide security settings, SSO, logging and audit trails, SIEM, billing, branding, and custom domains are managed at the site level and are not configurable within individual Workspaces.