Workspace Administration
========================

Each workspace in OneByZero Neo is a self-contained collaborative environment for a department or team. Members can build internal agents, organisation-wide agents, or customer-facing agents — depending on their role. Role-based access control ensures each member has only the permissions appropriate to their responsibilities: some users have full admin access to create and configure agents; others can only interact with published agents. You can switch between workspaces using the workspace switcher in the top-left corner of the platform.

Workspace Administrators manage everything within that boundary: who can access the workspace, what permissions they hold, and the variables, secrets, and credentials that agents use at runtime.

Workspace settings are accessed through the **Workspace Settings** panel, available to any user assigned the Admin role within a workspace.

Workspace Settings Tabs
-----------------------

The Workspace Settings panel contains the following tabs (displayed in alphabetical order):

- **Credentials** — create and manage API credentials that allow programmatic access to the workspace via the OneByZero Neo API
- **Members** — invite users and manage their workspace membership
- **Roles** — define roles as named collections of permissions; assign roles to members
- **Secrets** — securely store sensitive credentials (passwords, tokens, keys) in the vault backend
- **Variables** — store plain configuration key-value pairs that agents can reference at runtime
- **Workspace** — rename the workspace, view its ID, or delete it

.. toctree::
   :hidden:
   :maxdepth: 1

   workspace_setup
   member_management
   roles_permissions
   variables_secrets
   credentials
   workspace_analytics