Skip to content

Create workspaces

Only users with the workspace admin role can create a workspace. Once created, a workspace becomes active only after all invitees accept their invitations. If even one user doesn’t accept, the workspace stays in Pending status and cannot be used.

Who you can invite

To be eligible for invitation to a workspace, the following myst be true:

  • They’ve been added to your organization in Okta.
  • They’ve signed in to Opaque at least once.
  • They belong to your organization or another Opaque organization.

Important: Once the workspace is created, the member list can’t be changed.

Creating a workspace is a two-step process: first define workspace details, then set policies that govern job execution.

Define workspace details

To create a new workspace:

  1. Go to Workspaces and click New Workspace in the upper-right corner.
  2. Enter the new workspace details:

    • Name: Provide a unique name to help distinguish between projects. (The field supports letters, numbers, spaces, hyphens, and underscores. Duplicate names are allowed but discouraged.)
    • Description: Optionally, add a short summary (up to 150 characters).

    Screenshot of the workspace details page

    Click New Workspace on the Workspaces page to get started.

  3. Add collaborators:

    • Use the drop-down menu to select members from your organization or previous collaborators.
    • To invite external collaborators from a different Opaque organization, manually enter their Opaque-registered email addresses. (As the workspace admin, you’re added to the space automatically.)
    • You can skip this step for a single-party workspace.
  4. Choose the type of workspace you want to create. Your options include:

    • Analytics and ML for querying datasets, training models, and performing secure data analysis.
    • Agentic AI for building autonomous, policy-governed AI workflows powered by LLMs.

    For Analytics and ML workspaces, you can add no-code templates during setup or afterward (see Manage no-code templates).

  5. Double-check your workspace details and invitee list.

    Warning

    You can’t add or remove collaborators after the workspace is created—be sure to confirm your team in advance.

  6. Click Workspace policies to proceed.

Set workspace policies

You’ll now define who can approve and run jobs in the workspace. These controls are key to enforcing data access policies—especially in multiparty or compliance-sensitive scenarios.

Note

For single-party workspaces, no job or workflow approval is necessary. Click Create workspace to continue.

  1. Choose your job approval policy, that is, choose who needs to approve your job:

    • All workspace collaborators: Requires every member to approve a job. Best for strict security, but slower.
    • Custom approval groups: Define one or more groups, each with a minimum number of required approvals. Ideal for larger teams or cross-org projects.

    Note

    The job creator automatically approves the job.

    Screenshot of the workspace policies page

    Set your workspace policies.

  2. (Analytics and ML workspaces only) Choose your job run policy, that is, choose who has permission to run jobs. Your options include:

    • All workspace collaborators
    • Only the job creator
    • Specific collaborators: When selected, click Choose collaborators to limit who can run jobs and workflows.
  3. Click Create workspace, then Confirm.

What happens next?

Workspace invites are managed in-app.

  • The workspace status will show as Pending until all invited users have accepted their invitations.
  • Users will see pending invites in their Notifications or under the New Invites tab.
  • You can track the invitation status from the Workspaces page at any time.

Note

If you're waiting on pending invites, consider following up directly—the workspace won’t activate until everyone has accepted their invitation.