Workspaces, users and roles

Control authentication and authorization over all resources in your workspace.

All resources on Blaxel are logically regrouped in a workspace, which is the highest possible level of tenancy. Your organization will usually operate within one single workspace, but you can work with several workspaces when dealing with multiple business units or end-clients for example.

Users can be either team members, or service accounts that represent external systems that can operate Blaxel. They are added to a workspace with certain permissions on the workspace resources inherited from their role.

Workspace name

The workspace name (called name in Blaxel API) uniquely identifies your workspace. You set it when the workspace is created. Once set, it cannot be changed. The workspace name appears at the bottom of the left sidebar on Blaxel Console.

Each workspace also has a display name for better organization, which workspace admins can modify.

User roles

There are two roles that a user or service account can have in a workspace: admin and member.

Admins have complete access in the workspace, on all workspace resources. They can also modify all workspace settings, including inviting other team members. More specifically, admins have all the permissions that members have, in addition to:

• creating and editing policies
• inviting and removing users
• changing user’s permissions
• adding and removing integrations
• changing the workspace name
• deleting the workspace

Members can view the workspace settings but not edit them. They are also able to view and modify the following resources inside a workspace (including querying them when applicable):

• agents
• MCP servers
• model APIs
• batch jobs
• sandboxes

They have read-only access on the following resources:

• policies

Invite a member

Admins can invite team members via their email address. They will be prompted for the role to give the user.

The invitee will receive an email to allow them to accept the invitation on Blaxel console. They will not be able to access workspace resources until they have manually accepted the invitation. If the user doesn’t have a Blaxel account already, they will be asked to signup first.

Invitations to other workspaces are visible from your Profile.

Delete a workspace

Admins can delete a workspace on Blaxel console from the workspace settings. This action cannot be undone.