Overview of organizations and workspaces

Organizations and workspaces

An organization can contain multiple workspaces. The data in each workspace is isolated. Each user added to an organization must belong to at least one workspace. Organization administrators have permissions for all workspaces.

Use workspaces based on your business needs:

• If your company has multiple brands that require data isolation, use a separate workspace for each brand. If these brands share data from the same table, a user at the company level must manage table permissions within the organization. This user grants brand-specific table permissions to each workspace. This ensures that workspaces can only view their corresponding raw data. Each workspace operates independently. You can manage workspace members, analyze data authorized by the company, or attach a brand's own data source for analysis.

• If you do not need to isolate data between brands, you can perform all operations within the default workspace.

System role definitions

The following table describes the permissions for roles in organizations and workspaces.

Business implementation reference:

• Organization administrator: This role corresponds to the company's data team. They manage data permissions for workspaces based on underlying data tables. They can grant access to specific tables, rows, or columns for a designated workspace. For more information, see Grant permissions on organization data sources.

• Workspace administrator: This role corresponds to the data or operations management team for a brand or business unit. They configure system settings for the workspace and can also manage data permissions based on datasets. This allows them to control which data specific users within the workspace can see. For more information, see Set dataset permissions.

• Developer/Analyst/Other workspace roles: These roles correspond to the operations team for a brand or business unit. Data is isolated between accounts. The workspace administrator can customize the scope of operations for each role, which allows different users to access different feature modules. For more information about role definitions, see Workspace Roles Management.

System changes after an upgrade

When an organization upgrades from a system without workspaces to one with workspaces, the following changes occur:

• Organization level:

  • Administrators: All existing administrators become organization administrators. To reduce the permissions of these users, an organization administrator can change their roles on the Organization Management > Organization Member Management page. For more information, see Manage organization members.

  • Data sources: All existing data sources are upgraded to organization data sources. The default workspace has permissions for all tables in all organization data sources. To change these permissions, an organization administrator can modify the grants on the Organization Management > Data Source Table Authorization page. For more information, see Grant permissions on organization data sources.

• Workspace level:

  • All users except organization administrators are assigned to the default workspace. Existing roles and user group settings remain unchanged.

  • All existing works are automatically transferred to the default workspace.