Team and workspaces
Roles, invitations, switching workspaces, leaving and deleting.
A workspace is what a team shares: its data sources and objects, views, page layouts, plugins, API keys and activity. You can belong to several; nothing is shared between them. Every page of one sits below its short name: https://<your-dataembed>/<workspace>/… (say acme-k3x9q0). Renaming the workspace keeps it, so links and scripts keep working.
Roles
Everyone is an owner, an admin or a member. A role caps the scope of everything acting for that person: members read and write; owners and admins also admin.
| What they can do | Owner | Admin | Member |
|---|---|---|---|
| Read, create, edit and delete records; import, export, run SQL | ✓ | ✓ | ✓ |
| Change views, page layouts and workspace plugins for themselves | ✓ | ✓ | ✓ |
| Rename objects and fields, edit a field's options | ✓ | ✓ | ✓ |
| Use the copilot, run plugin actions, connect their own agents | ✓ | ✓ | ✓ |
| Save views, layouts and workspace plugins for everyone | ✓ | ✓ | |
| Connect data sources, add tables and columns, hide tables, delete fields | ✓ | ✓ | |
| Turn plugins on and off, change their settings, create API keys | ✓ | ✓ | |
| Approve an agent's change that can't be undone | ✓ | ✓ | |
| Invite, change roles, remove people, rename the workspace | ✓ | ✓, not owners | |
| Delete the workspace | ✓ |
Only an owner makes, changes or removes owners. Nobody changes their own role or removes themselves (that's leaving), and a workspace's only owner can't be demoted.
Invite people
- Settings → Members → Invite people.
- Enter their email and pick Member or Admin (make them an owner once they've joined).
- Send invitation shows the link to copy, and whether the email went out: without email on the deployment, or if sending fails, share the link yourself.
A link works for 7 days, only for the address it was sent to, and skips the waitlist: that address can sign up even while Dataembed is invite-only. Pending invitations lists those not yet answered, open or Expired: Resend gives an open one another 7 days, or an expired one a new link; Revoke ends it.
The link opens /invite/<id>. Sign in or sign up with the invited address; Accept and join opens the workspace, Decline turns it down. A link that expired, was revoked, or was already accepted or declined says so.
Switch and create workspaces
The workspace's name at the top of the sidebar lists your workspaces, with your role in each. Create workspace… makes an empty one with you as owner. Opening the app takes you to the one you used last. A link to a workspace you're not in shows a page saying it isn't available, whether or not it exists.
Leave or delete
Leave workspace, at the bottom of Settings → Members. The only owner can't leave: make someone else owner first, or delete the workspace.
When someone leaves or is removed, everything acting for them there stops at once: their API keys and connected apps are revoked, their copilot threads and jobs end, their Just me changes go, and invitations to their address are revoked. Records they changed keep the changes.
An owner deletes the workspace in Settings → General, typing its name. Its members, views, layouts, plugins, keys, activity and its sample database go with it. Connected databases aren't touched. It can't be undone. If some of its copilot threads or jobs can't be deleted at Anthropic yet, the delete is refused: try again in a few minutes. On a deployment whose AI has been turned off since they ran, nothing can delete them, so the workspace is deleted and they stay at Anthropic.
Agents and the team
The members page is also an API and a set of agent tools (workspace_invite, workspace_update_member_role, workspace_remove_member, …), with admin scope. workspace_invitations gives each invitation's status (open, with its link, or expired); workspace_invite answers emailDelivery (sent, logged, off or failed: unless sent, pass the link on). Every change to the team can't be undone, so when an agent asks for one it waits for an approval.