Workspace Administration
Definition
Workspace Administration covers two code-backed layers:
- Organization administration in the Admin Console, including members, groups, roles, domain control, IP address control, audit log, usage statistics, profile, support settings, integrations, and API keys.
- Project administration in the main product, including project members, groups, and project permission assignments.
Keep these layers separate when writing or operating from the docs. A workspace-level admin control is not the same as a project-specific correctness workflow.

Organization groups belong to the admin layer. Project membership and correctness artifact ownership remain separate concepts.
Fields, states, or lifecycle rules
- Project permissions in the main product are code-backed for user and group subjects with
ADMINorMEMBERproject roles. - The Admin Console exposes additional organization-level controls such as roles, domain control, IP address control, integrations, and API keys.
- Do not infer compliance status, retention rules, SSO behavior, billing behavior, rate limits, or deployment options from the existence of an admin screen.
- Approval actions in correctness workflows require accountable ownership; AI suggestions do not approve themselves.
Related objects
Related objects may include workspace members, groups, workspace roles, permission keys, project permission assignments, domain controls, IP controls, API keys, notification integrations, and the project artifacts those people can access.
Worked example
Human approval boundary
A Workspace administrator manages an organization group in the Admin Console. A Project owner then grants that group access under Project Settings. The group can inspect the Project according to the current Project membership surface, but this does not change organization security controls or create authority over every governed correctness artifact.
Source confidence
Code-backed: this page is grounded in the Admin Console navigation and the main product project settings routes listed in source_refs.