Workspace settings
Workspace settings decide who can join and what crosses the workspace’s boundary, so knowledge can be reused without carrying client data.
Reuse and sharing
- Reuse stays inside a workspace. Anything wider is shared item by item with named people, groups or agents.
- To keep a client workspace’s content from being used elsewhere, turn Used in other workspaces off when you create it; a workspace admin can also turn it off later.
- Before a skill is shared beyond a workspace, have someone responsible remove client names and attachments from it.
PII filters
There is no PII detection on shared items. PII filters on model calls are available through a custom gateway, for example Lakera or your own service. Model guardrails are set at the platform layer; see Enterprise controls.
Settings and defaults
| Setting | What it means | Default |
|---|---|---|
| General access | Invite only: only invited people join. Discoverable: anyone in the organization can find it and join. | Invite only |
| Used in other workspaces | Its agents, skills and files can be used from a person’s other workspaces. | On |
| Used here from other workspaces | Agents, skills and files from a person’s other workspaces can be used here. | On |
| Share with people outside | A member can share one file or agent with a non-member, who gets that item only. | On |
On organizations still on the older permissions system, a workspace created without choosing general access is Discoverable. Share with people outside is shown only on those organizations; organizations that use the newer permissions system have no outside guests.
Change a setting
Settings are set at creation and changed later in Workspace settings > Access by a workspace admin or owner. Turning a boundary off first shows what would stop working, and pauses existing shares across it.
An organization admin can turn off sharing with people outside for every workspace, and decides who may create workspaces (see Workspaces).