Create workspaces¶
Only users with the workspace admin role can create a workspace. Once created, a workspace becomes active only after all invitees accept their invitations. If even one user doesn’t accept, the workspace stays in Pending status and cannot be used.
Who you can invite
To be eligible for invitation to a workspace, the following myst be true:
- They’ve been added to your organization in Okta.
- They’ve signed in to Opaque at least once.
- They belong to your organization or another Opaque organization.
Important: Once the workspace is created, the member list can’t be changed.
Creating a workspace is a two-step process: first define workspace details, then set policies that govern job execution.
Define workspace details¶
To create a new workspace:
- Go to Workspaces and click New Workspace in the upper-right corner.
-
Enter the new workspace details:
- Name: Provide a unique name to help distinguish between projects. (The field supports letters, numbers, spaces, hyphens, and underscores. Duplicate names are allowed but discouraged.)
- Description: Optionally, add a short summary (up to 150 characters).
Click New Workspace on the Workspaces page to get started.
-
Add collaborators:
- Use the drop-down menu to select members from your organization or previous collaborators.
- To invite external collaborators from a different Opaque organization, manually enter their Opaque-registered email addresses. (As the workspace admin, you’re added to the space automatically.)
- You can skip this step for a single-party workspace.
-
Choose the type of workspace you want to create. Your options include:
- Analytics and ML for querying datasets, training models, and performing secure data analysis.
- Agentic AI for building autonomous, policy-governed AI workflows powered by LLMs.
For Analytics and ML workspaces, you can add no-code templates during setup or afterward (see Manage no-code templates).
-
Double-check your workspace details and invitee list.
Warning
You can’t add or remove collaborators after the workspace is created—be sure to confirm your team in advance.
-
Click Workspace policies to proceed.
Set workspace policies¶
You’ll now define who can approve and run jobs in the workspace. These controls are key to enforcing data access policies—especially in multiparty or compliance-sensitive scenarios.
Note
For single-party workspaces, no job or workflow approval is necessary. Click Create workspace to continue.
-
Choose your job approval policy, that is, choose who needs to approve your job:
- All workspace collaborators: Requires every member to approve a job. Best for strict security, but slower.
- Custom approval groups: Define one or more groups, each with a minimum number of required approvals. Ideal for larger teams or cross-org projects.
Note
The job creator automatically approves the job.
Set your workspace policies.
-
(Analytics and ML workspaces only) Choose your job run policy, that is, choose who has permission to run jobs. Your options include:
- All workspace collaborators
- Only the job creator
- Specific collaborators: When selected, click Choose collaborators to limit who can run jobs and workflows.
- Click Create workspace, then Confirm.
What happens next?¶
Workspace invites are managed in-app.
- The workspace status will show as Pending until all invited users have accepted their invitations.
- Users will see pending invites in their Notifications or under the New Invites tab.
- You can track the invitation status from the Workspaces page at any time.
Note
If you're waiting on pending invites, consider following up directly—the workspace won’t activate until everyone has accepted their invitation.