---
id: governance.workspace-administration
title: Workspace Administration
summary: Administer workspace and project boundaries so correctness work has clear ownership and scope.
kind: reference
product_area: governance
status: stable
updated: 2026-09-07
canonical: /docs/governance/workspace-administration
---

# Workspace Administration

## Definition

Workspace Administration covers two code-backed layers:

- Organization administration in the Admin Console, including members, groups, roles, domain control, IP address control, audit log, usage statistics, profile, support settings, integrations, and API keys.
- Project administration in the main product, including project members, groups, and project permission assignments.

Keep these layers separate when writing or operating from the docs. A workspace-level admin control is not the same as a project-specific correctness workflow.

![Admin Console Groups screen showing organization groups, role names, and member counts.](/docs-assets/assets/screenshots/admin-groups-overview.png)

Organization groups belong to the admin layer. Project membership and correctness artifact ownership remain separate concepts.

## Fields, states, or lifecycle rules

- Project permissions in the main product are code-backed for user and group subjects with `ADMIN` or `MEMBER` project roles.
- The Admin Console exposes additional organization-level controls such as roles, domain control, IP address control, integrations, and API keys.
- Do not infer compliance status, retention rules, SSO behavior, billing behavior, rate limits, or deployment options from the existence of an admin screen.
- Approval actions in correctness workflows require accountable ownership; AI suggestions do not approve themselves.

## Related objects

Related objects may include workspace members, groups, workspace roles, permission keys, project permission assignments, domain controls, IP controls, API keys, notification integrations, and the project artifacts those people can access.

{% example-demo title="Human approval boundary" %}
A Workspace administrator manages an organization group in the Admin Console. A Project owner then grants that group access under Project Settings. The group can inspect the Project according to the current Project membership surface, but this does not change organization security controls or create authority over every governed correctness artifact.
{% /example-demo %}

## Source confidence

Code-backed: this page is grounded in the Admin Console navigation and the main product project settings routes listed in source_refs.

## Related task pages

{% related-card-grid title="Related task pages" %}
- [Request an Expert Contribution](/docs/expert-contributions/request-contribution)
- [Manage Project Members](/docs/project-settings/project-members)
- [Import and prepare cases](/docs/operating-manual/import-and-prepare-cases)
{% /related-card-grid %}