Workspaces and members

A Workspace is the boundary for the people and infrastructure that belong together. It owns one server, the Projects and code on that server, and the memberships that let a team manage them.

Last updated

Invite people who should operate Tokay

Invite a teammate by email from Workspace settings. They accept by signing in with that exact address. If they do not have a Tokay account, the invitation creates one through the same magic link flow.

When inviting a Member, choose all current Projects or only the Projects they should operate. People who only need to use a deployed app are visitors, not Workspace members. See Who can open your app.

Workspace roles set the broad boundary

  • Owner has full authority, including changing member roles and transferring ownership. Every Workspace always has an Owner.
  • Admin can operate everything in the Workspace and invite Admins or Members.
  • Member reaches only the Projects and code explicitly granted to them.

Ownership is transferred through member management rather than granted in an invitation. Project and repository permissions provide the narrower roles inside the Workspace. See Permissions.

Remove access when someone leaves

Removing a member ends their Workspace access, active sessions, and tokens within seconds. Access they had to protected apps as a Workspace member ends at the same time.

Use Projects to keep team access focused

Invite the team to the Workspace once, then use Project membership to decide who operates each application. A Viewer can check status without changing anything, while a Member can deploy and configure the Services they support.