A team responsible for a file-exchange process often needs to manage its users, connections, and workflows together. Workspace Administrator access gives that team full administration of the resources and files in its assigned Workspaces, while leaving other Workspaces and site-wide policy under separate administration.

Files and Operational Resources

A Workspace Administrator can manage the Workspace's users, Groups, Partners, folders, Remote Servers, Syncs, Automations, and other Workspace resources. This includes full access to its files and the ability to configure where workflows deliver them. Folder permissions limit access for other users; they do not narrow the Workspace Administrator's own authority.

For example, the team operating supplier transfers can administer a Workspace containing supplier folders, connections, and workflows. Payroll files can remain in a different Workspace the team does not administer or otherwise have access to. The boundary depends on where the resources belong and which grants the users hold; creating a Workspace does not move existing resources into it.

Site Administrators retain full access across all Workspaces. Adding Workspace Administrator access to a Site Administrator does not restrict that person's existing authority. Use Workspace administration without Site Administrator access when the intended responsibility is limited to a team's resources.

Shared Site Configuration

Workspaces share the Site's authentication configuration, security policies, and other site-wide settings. Workspace administration does not create an independent Site or a separate authentication policy. The Workspace administration reference distinguishes Workspace resources from settings and actions reserved for Site Administrators.

Workspace administration also does not grant control of Child Sites. A parent-site user needs a separate Child Site Administrator grant to administer one. Authority to manage that user's parent-site identity remains a separate decision.

Individual and Group Grants

A Site Administrator can designate a user within a Custom Workspace as its administrator. A Default Workspace user or Group can instead receive Admin permission on the Custom Workspace's root. Each method grants administration of the whole Workspace. Group membership therefore carries the same authority as an individual grant; review who may change that membership.

Workspace Administrators can also appoint additional Workspace Administrators within their own Workspace by creating a user with that access or promoting an existing Workspace user. Granting Workspace administration therefore includes the ability to share that administrative responsibility within its scope.

A Default Workspace user with that root Admin grant also receives Folder Admin directory visibility in the Default Workspace. Seeing its users and Groups supports selecting recipients for permissions and notifications. It does not grant administration of those users or Groups, or expose all Default Workspace folder records. Permission records, Folder Settings, and notifications still follow the inherited-record visibility rules.

Workspace Access and Administration explains assignment and additional Workspace access. Review the user's full set of grants when withdrawing Workspace administration; a direct grant and a Group grant can independently provide the same access.