Organizations and workspaces
Choose the scope for platform administration, product resources and permissions.
An organization owns administration and membership. A workspace groups product resources within that organization. Select both before creating resources or investigating a missing connection, secret or graph entity.
Resource scope
| Scope | Resources |
|---|---|
| Organization | Users, invitations, groups, roles, service principals, security policy and workspaces. |
| Workspace | Product resources, including VegaFlow connections, clusters and QuickFlows; VegaGraph metadata; and secret vaults. |
Customer resource APIs express workspace scope in the path:
/orgs/{org_id}/workspaces/{workspace_id}/...The workspace must belong to the selected organization. A valid resource ID does not grant access in another workspace.
Set up a workspace
Select the organization
Join through an organization invitation or use an organization you already administer. Confirm your membership and assigned permissions.
Create or select a workspace
Use a name and description that explain the team or environment boundary. Organization administrators can list, create, inspect, update and remove workspaces when permitted.
Assign access
Grant workspace access and the product permissions needed for the work. Membership alone does not grant permission to create or operate every resource.
Prepare resources
Create the required secret vaults, then follow the platform quickstart for compute, connections and data.
Permission layers
| Layer | What it controls |
|---|---|
| Organization | Administrative actions on users, roles, workspaces and other organization resources. |
| Workspace | Access to the selected workspace. |
| Product collection | Listing or creating a family of resources, such as connections or entities. |
| Resource instance | Actions on a particular connection, cluster, vault or graph object. |
Use roles and groups for repeatable assignments. A VegaGraph context changes how graph facts are resolved within a workspace; it does not replace the workspace boundary.
Change or remove a workspace
Before removal, inventory the product resources, secrets and metadata that depend on the workspace. Coordinate changes with their owners and confirm the intended organization and workspace IDs.
If a resource appears missing, check the dashboard selection and permissions before assuming it was deleted. See platform troubleshooting.