All resources on Beamlit are logically regrouped in a workspace, which is the highest possible level of tenancy. Your organization will usually operate within one single workspace, but it is not necessarily the case when dealing with multiple business units or end-clients for example.

Users can be either team members, or service accounts that represent external systems that can operate Beamlit (typically, a Beamlit operator). They are added to a workspace with certain permissions on the workspace resources inherited from their role.

​
User roles

There are two roles that a user or service account can have in a workspace: admin and member.

Admins have complete access in the workspace, on all workspace resources. They can also modify all workspace settings, including inviting other team members. More specifically, admins have all the permissions that members have, in addition to:

  • creating and editing policies and environments
  • inviting and removing users
  • changing user’s permissions
  • adding and removing integrations
  • changing the workspace name
  • deleting the workspace

Members can view the workspace settings but not edit them. They are also able to view and modify the following resources inside a workspace:

They have read-only access on the following resources:

​
Invite a member

Admins can invite team members via their email address. They will be prompted for the role to give the user.

The invitee will receive an email to allow them to accept the invitation on Beamlit console. They will not be able to access workspace resources until they have manually accepted the invitation. If the user doesn’t have a Beamlit account already, they will be asked to signup first.

Invitations to other workspaces are visible from your Profile.

​
Delete a workspace

Admins can delete a workspace on Beamlit console from the workspace settings. This action cannot be undone.

MonitoringService accounts