Skip to content

Setting Up Workspaces

Overview

Create a workspace, allocate cloud accounts to it, invite its users, and apply branding. Repeat one level down for each workspace that manages its own customers or teams.

Who can use this

You need:

  • MSP Root Admin to create workspaces directly under the root organization.
  • MSP Managed Workspace Manager to create workspaces under a workspace you manage.
  • workspace:modify to edit workspace settings and branding.
  • user:add to invite users into a workspace.

A workspace manager can act only inside their own subtree.

Before you begin

Confirm:

  • The cloud accounts you will allocate are connected and visible in your own account pool.
  • Whether the new workspace needs to manage workspaces of its own — this decides Managed or Normal.
  • The markup rate, if you are charging this workspace above raw cloud cost.
  • The name and email of the workspace's first user.

Create a workspace

Two entry points open the same six-step wizard.

To create a workspace directly under the root organization:

  1. Open Organization > Overview.
  2. Select Workspaces.
  3. Select New managed customer.

To create a workspace under a workspace you manage:

  1. Open Workspace.
  2. Select Child workspaces.
  3. Select New workspace.

Then complete the wizard:

  1. Basics — enter Name and an optional Description. Select Workspace type: Managed (can own children) or Normal (leaf).
  2. Ownership — select the Parent workspace. Leave empty to attach directly under your root scope.
  3. Account allocation — select the cloud accounts to allocate. See Allocate cloud accounts.
  4. Billing rule — enter Markup %, or skip to leave the workspace pass-through at 0%. See Markup and billing rules.
  5. Team & access — optionally enter a Team name and select Member user IDs from active users.
  6. Review — check the summary and select Confirm & create.

If a step fails after the workspace is created, the wizard keeps your progress and shows Retry. Selecting Retry resumes from the failed stage instead of creating a duplicate workspace.

Allocate cloud accounts

A workspace sees no cost data until you allocate accounts to it. You can allocate during wizard step 3 or at any time afterwards.

  1. Open the workspace's Account Allocations tab, or select Allocate accounts on a child workspace row.
  2. Filter by Provider or search in Search accounts by name or ID.
  3. Select Add on each account to allocate, or Select all shown to add every account matching the current filter.
  4. Select Save allocation.

The table shows each account's name, cloud ID, and type: Standalone account, Consolidated billing account, or Sub-account. Selecting a parent account automatically includes its sub-accounts, which display Included with parent.

Accounts already allocated to a sibling workspace are disabled and show Allocated to <workspace>. One account cannot serve two siblings at once.

To remove every allocated account, select Remove all and confirm. The workspace loses access to that cost data.

Note

You can only allocate accounts your own workspace already holds. The picker shows your own pool only. At the root, it shows the full connected inventory.

Invite users

Users are created directly into the workspace where they belong.

  1. Open the workspace's Users tab.
  2. Select Add User.
  3. Choose Tenant User or External User.
  4. Enter Name and Email Address.
  5. Select Role.
  6. Keep Login using SSO selected under Select Authentication Method: if the user signs in with SSO.
  7. Select Add.

A workspace manager can assign only MSP Customer Dashboard User inside their workspace. A root administrator sees the full role catalogue and can assign organization-level roles, including MSP Managed Workspace Manager for a workspace that needs to manage itself.

If the Users tab shows No workspace allocated., select a workspace first — a user always needs a workspace context.

Apply branding

Branding changes the name and logo the workspace's own users see in their dashboard header and workspace switcher.

  1. Open the workspace's Branding tab, or open Organization > Overview > Workspaces, select the workspace, and choose Branding.
  2. Enter a Brand name of up to 60 characters.
  3. Upload a Logo in JPG, JPEG, PNG, or SVG format, up to 5 MB.
  4. Select Save branding.

Select Remove logo to clear an existing logo.

Build the next level down

A Managed workspace repeats this whole process for its own customers. Its manager signs in, opens Workspace, and creates child workspaces, allocating from the account pool the parent gave them and inviting their own users. Everything stays scoped to their subtree.

Expected result

The workspace appears in the workspace list with its owner, type, and status. Its users sign in and see a cost dashboard covering exactly the accounts allocated to it.

Notes and limitations

  • Users are created against a specific workspace. There is no single action that moves a user between workspaces — remove the user from one workspace and add them to the other.
  • Adding a user to a team requires that the user is already registered in that workspace.
  • A Normal workspace cannot create children or allocate accounts.

Troubleshooting

If New workspace or New managed customer is missing, confirm your role includes workspace management permission for the target workspace.

If an account does not appear in the allocation picker, confirm it is allocated to your own workspace and not already allocated to a sibling.

If an invite fails with a permission error, confirm your role includes user:add.