Workspace Access Controls - Namespace Documentation

Documentation Index

Fetch the complete documentation index at: /docs/llms.txt

Use this file to discover all available pages before exploring further.

Skip to main content

Assistant

Responses are generated using AI and may contain mistakes.

Namespace provides comprehensive access control mechanisms to help you manage who can access your workspace and what actions they can perform. This page explains the available authentication methods, role-based access controls, and member management features.

​ Authentication Methods

Namespace supports multiple authentication methods to accommodate different organizational requirements and security policies.

​ Social Login Options

Google SSO: Members can sign in using their Google accounts, providing seamless integration with Google Workspace environments.GitHub SSO: Authenticate using GitHub credentials, ideal for development teams already using GitHub for version control.

​ Enterprise Authentication

SAML SSO: Available for enterprise customers, SAML single sign-on provides integration with your organization’s identity provider such as Okta, OneLogin, or Auth0.Enterprise customers can configure advanced SAML SSO options for enhanced security and user management:

​ Automatic Workspace Joining

Configure your SAML SSO integration to automatically grant workspace access to any member from your organization who authenticates through your identity provider. You can configure a default role that new members assume on workspace signup. This streamlines onboarding and ensures all team members have appropriate access.

​ Enforced SSO Authentication

Enhance security by requiring all workspace members to sign in exclusively through your organization’s identity provider, ensuring consistent security policies across your organization. When this option is enabled, social login methods (Google and GitHub) are disabled for all workspace members.

​ Custom Session Durations

Configure custom session durations for SAML SSO logins to meet your organization’s security requirements. Once the maximum session length (default is one hour) is reached, re-authentication is required. Namespace also supports different session policies for different user roles.

​ Group-Based Role Updates (SCIM)

Namespace supports directory sync via SCIM, allowing you to manage workspace membership and roles directly from your identity provider. When a directory sync is configured, group membership changes in your identity provider automatically propagate to Namespace: users are added or removed from the workspace, and their workspace roles are updated based on the group-to-role mapping.Once directory sync is set up, management of the group-to-role mapping is self-service. From the managed SSO domain entry in your workspace settings, workspace owners and admins can click Manage Groups to open the directory-sync admin portal and configure how identity provider groups map to Namespace roles. Directory role mappings can assign the Admin, Editor, Devbox User, Accountant, or Reader role.To enable directory sync for your workspace, contact our support team.

​ Adding Members

You can invite new members to your workspace manually using two convenient methods. Any invite expires after a week unless revoked by the inviter ahead of time. If your workspace is connected to your organization’s identity provider, you can also grant workspace access to any member from your organization.

​ Invite Links

  1. Navigate to your workspace settings
  2. Choose “Generate link”
  3. Share the link with the new workspace member

Invite links become invalid after a user accepts the invite.

​ Invite Emails

  1. Navigate to your workspace settings
  2. Choose “Invite by email”
  3. Enter the email addresses to invite

​ Role-Based Access Control (RBAC)

Namespace supports comprehensive role-based access control with six distinct roles, each providing different levels of access and permissions:

​ Supported Roles

Only business and enterprise accounts have full access to RBAC. For a full overview of the features included in each plan, visit the pricing page.

​ Role Permissions Matrix

Action Owner Admin Editor Devbox User Accountant Reader
User management
Billing and Plan
Connect GitHub organizations
Delete a Workspace
View Audit Logs
Notification settings
Manage Vault Secrets
Manage all Devboxes
Start Builds & Instances
Release Cache Volumes
Create Devboxes
SSH/VNC
View Instances
View Builds
View GitHub Actions
Usage explorer
Access previews

​ Workload Access

Each compute instance receives a dedicated workload token, granting access to Namespace features and APIs. The token uniquely identifies the instance ensuring any entry in our immutable audit log can be traced back to the source. By default, workload tokens allow access to any Namespace feature, enabling frictionless feature composition. These permissions can be dynamically configured, allowing enterprise customers to enforce fine-grained access policies on which features may be accessed.

​ Support and Configuration

For assistance with configuring advanced access controls or enterprise SSO integration, contact our support team. Our team can help with SAML SSO setup, custom authentication requirements, and security policy implementation.

Last modified onSeptember 16, 2026

Ctrl+I

{"docsConfig":{"theme":"almond","$schema":"https://mintlify.com/docs.json","name":"Namespace Documentation","colors":{"primary":"#1C32FF","light":"#6B78FF","dark":"#1C32FF"},"logo":{"light":"https://mintcdn.com/namespace-labs/qOJQ7kaWRgoS8lyv/logo-light.svg?fit=max\\u0026auto=format\\u0026n=qOJQ7kaWRgoS8lyv\\u0026q=85\\u0026s=6827b0c81c335badc1cef13b83383e1d","dark":"https://mintcdn.com/namespace-labs/qOJQ7kaWRgoS8lyv/logo-dark.svg?fit=max\\u0026auto=format\\u0026n=qOJQ7kaWRgoS8lyv\\u0026q=85\\u0026s=63702d83d8fb259023deb79db06aabbb","href":"https://namespace.so"},"favicon":"https://mintcdn.com/namespace-labs/MoefQ379UcpNU680/favicon.svg?fit=max\\u0026auto=format\\u0026n=MoefQ379UcpNU680\\u0026q=85\\u0026s=6f14a088da55e5f41847845796737353","navbar":{"links":\[{"href":"https://namespace.so/changelog","label":"Changelog"},{"href":"https://namespace.so/support","label":"Support"}\],"primary":{"type":"button","label":"Log in","href":"https://cloud.namespace.so"}},"footer":{"socials":{"github":"https://github.com/namespacelabs","linkedin":"https://www.linkedin.com/company/namespacelabs","x":"https://x.com/namespacelabs"}},"icons":{"library":"lucide"},"contextual":{"options":\["copy","view","chatgpt","claude"\],"display":"header"},"interaction":{"drilldown":false},"metadata":{"timestamp":true},"styling":{"latex":true},"navigation":{"global":{"anchors":\[{"anchor":"Changelog","icon":"history","href":"https://namespace.so/changelog"},{"anchor":"Trust Center (SOC2)","icon":"shield-check","href":"https://trust.namespace.so/"},{"anchor":"Status","icon":"activity","href":"https://namespace-status.com/"},{"anchor":"Support","icon":"message-circle","href":"https://namespace.so/support"}\]},"pages":\[\]}},"deployment":{"deploymentMetadataValue":{"subdomain":"namespace-labs","hasAudioNarration":false,"actualSubdomain":"namespace-labs","customDomains":\["namespace.so"\],"gitSource":{"type":"github","owner":"namespacelabs","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"latestBuiltDeploymentHistoryId":"6ae0862207896b4595e1934b","collectionId":"847aecca-4a0b-40b4-a393-e976cc214b43","liveDeploymentHistoryId":"6ae0862207896b4595e1934b","schemaVersion":"v3"},"entitlements":{"AI\_CHAT":{"status":"ENABLED"},"WEB\_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6ae0a8f6edbd4c098a94623c","clientVersion":"0.0.3971","searchFilterCounts":\[{"language":"default","tag":"Products","count":377},{"language":"default","tag":"CLI","count":166},{"language":"default","tag":"Command line","count":165},{"language":"default","tag":"Namespace CLI","count":131},{"language":"default","tag":"Documentation","count":104},{"language":"default","tag":"GitHub Actions","count":40},{"language":"default","tag":"Devbox CLI","count":34},{"language":"default","tag":"Integrations","count":33},{"language":"default","tag":"SDK","count":25},{"language":"default","tag":"Namespace SDK","count":23}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"/docs","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":true},"customCss":[{"filePath":"snippets/diagrams/styles.css","content":".ns-diagram{--ns-diagram-background:#ffffff;--ns-diagram-grid:#e5e7ee;--ns-diagram-border:#e5e7ee;--ns-diagram-card:#ffffff;--ns-diagram-neutral-zone:#fafbfc;--ns-diagram-brand-zone-start:rgba(28, 50, 255, 0.04);--ns-diagram-brand-zone-end:rgba(28, 50, 255, 0.07);--ns-diagram-brand-border:#c8ceff;--ns-diagram-heading:#202938;--ns-diagram-muted:#8892a6;--ns-diagram-copy:#4a5468;position:relative;width:100%;margin:2rem 0;padding:clamp(20px,3.5vw,32px);overflow:hidden;color:var(--ns-diagram-heading);background:var(--ns-diagram-background);border:1px solid var(--ns-diagram-border);border-radius:20px;box-shadow:0 1px 0 rgba(32,41,56,.04),0 1px 2px rgba(32,41,56,.06)}.dark .ns-diagram{--ns-diagram-background:#111827;--ns-diagram-grid:#374151;--ns-diagram-border:#374151;--ns-diagram-card:#1f2937;--ns-diagram-neutral-zone:#171f2d;--ns-diagram-brand-zone-start:rgba(107, 120, 255, 0.1);--ns-diagram-brand-zone-end:rgba(107, 120, 255, 0.16);--ns-diagram-brand-border:#4f5fc7;--ns-diagram-heading:#f3f4f6;--ns-diagram-muted:#aeb6c5;--ns-diagram-copy:#cbd5e1}.ns-diagram-grid-background{position:absolute;inset:0;pointer-events:none;background-image:radial-gradient(circle,var(--ns-diagram-grid) 1px,transparent 1px);background-size:16px 16px;opacity:.5;mask-image:linear-gradient(180deg,transparent 0,#000 10%,#000 90%,transparent 100%)}.ns-diagram-content{position:relative}.ns-diagram-caption{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}.ns-diagram-mark{display:inline-flex;flex-shrink:0;align-items:center;justify-content:center;margin:0;border-radius:8px}.ns-diagram-mark-anthropic{color:#d97757;background:#fcefe8}.ns-diagram-mark-devin{color:#4338ca;background:#eef0ff}.ns-diagram-mark-cursor{color:#111827;background:#eef0f3}.ns-diagram-mark-control{color:#1c32ff;background:#e0e7ff}.ns-diagram-mark-terminal{color:#fff;background:#202938}.ns-diagram-mark-worker{color:#4338ca;background:#eef1ff}.ns-diagram-zone{position:relative;display:flex;flex-direction:column;padding:1.25rem;background:var(--ns-diagram-neutral-zone);border:1px dashed #d2d6e0;border-radius:14px}.dark .ns-diagram-zone{border-color:#4b5563}.ns-diagram-zone-brand{background:linear-gradient(180deg,var(--ns-diagram-brand-zone-start),var(--ns-diagram-brand-zone-end));border:1px solid var(--ns-diagram-brand-border)}.ns-diagram-zone-header{display:flex;align-items:center;gap:.5rem;margin-bottom:.75rem;color:var(--ns-diagram-copy);font-size:11px;font-weight:600;letter-spacing:.1em;text-transform:uppercase}.ns-diagram-zone-center{display:flex;flex:1;align-items:center}.ns-diagram-zone-center>*{width:100%}.ns-diagram-card{position:relative;display:flex;align-items:center;gap:1rem;min-width:0;padding:1rem 1.25rem;background:var(--ns-diagram-card);border:1px solid var(--ns-diagram-border);border-radius:12px;box-shadow:0 1px 0 rgba(32,41,56,.04),0 1px 2px rgba(32,41,56,.06)}.ns-diagram-card-brand{border-color:var(--ns-diagram-brand-border)}.ns-diagram-card-copy{display:flex;min-width:0;flex-direction:column}.ns-diagram-card-label{color:var(--ns-diagram-heading);font-size:16px;font-weight:600;line-height:1.25;letter-spacing:-.01em}.ns-diagram-card-sublabel{margin-top:.125rem;color:var(--ns-diagram-muted);font-size:12px;line-height:1.35}.ns-managed-layout{display:grid;grid-template-columns:1fr auto 1.05fr;align-items:stretch}.ns-managed-connector{display:flex;width:64px;flex-direction:column;align-items:center;justify-content:center;padding:0 .25rem;color:var(--ns-diagram-muted);font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:10.5px}.ns-managed-connector>span{margin-bottom:.375rem}.ns-managed-connector-path{display:flex;width:56px;align-items:center}.ns-managed-connector-line{flex:1;height:1.5px;background:#d2d6e0}.ns-managed-connector-arrow{border-top:6px solid transparent;border-bottom:6px solid transparent;border-left:9px solid #d2d6e0}.ns-mini-connector{display:flex;flex-direction:column;align-items:center;padding:.375rem 0}.ns-mini-connector>div{width:1.5px;height:12px;background:var(--ns-diagram-brand-border)}.ns-mini-connector>span{border-top:7px solid var(--ns-diagram-brand-border);border-right:5px solid transparent;border-left:5px solid transparent}.ns-devin-devboxes,.ns-devin-sessions{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1.5rem}.ns-devin-mobile-layout{display:none}.ns-devin-connectors,.ns-devin-connectors>div{display:grid;grid-template-columns:repeat(2,minmax(0,1fr))}.ns-devin-connectors{gap:1.5rem}.ns-devin-connectors>div{padding:0 1rem}.ns-devin-connector{position:relative;display:flex;min-height:110px;align-items:center;justify-content:center;color:var(--ns-diagram-copy);font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:10px;line-height:1.25;text-align:center}.ns-devin-management-connector{min-height:70px;color:#6366f1}.ns-devin-connector-line{position:absolute;top:0;bottom:0;left:50%;width:1.5px;background:#d2d6e0;transform:translateX(-50%)}.ns-devin-management-connector .ns-devin-connector-line,.ns-diagram-connector-dashed .ns-diagram-vertical-line{width:0;background:0 0;border-left:1.5px dashed var(--ns-diagram-brand-border)}.ns-devin-connector>span,.ns-diagram-vertical-connector>span{position:relative;z-index:1;padding:0 .375rem;background:var(--ns-diagram-background)}.ns-control-plane-pill{display:flex;align-items:center;align-self:center;gap:.375rem;margin-bottom:1rem;padding:.375rem .75rem;color:#4338ca;background:#eef1ff;border:1px solid var(--ns-diagram-brand-border);border-radius:999px;font-size:12px;font-weight:500}.ns-diagram-vertical-connector{position:relative;display:flex;align-items:center;justify-content:center;color:var(--ns-diagram-copy);font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-size:10px;line-height:1.25;text-align:center}.ns-diagram-vertical-line{position:absolute;top:0;bottom:0;left:50%;width:1.5px;background:#d2d6e0;transform:translateX(-50%)}.ns-diagram-connector-dashed{color:#6366f1}.ns-diagram-arrow-down{position:absolute;bottom:0;left:50%;border-top:8px solid #d2d6e0;border-right:5px solid transparent;border-left:5px solid transparent;transform:translateX(-50%)}.ns-devin-management-connector .ns-diagram-arrow-down,.ns-diagram-connector-dashed .ns-diagram-arrow-down{border-top-color:var(--ns-diagram-brand-border)}.ns-bazel-connector-inset{padding:0 1rem}.ns-bazel-workers{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:1rem}@media (max-width:767px){.ns-managed-layout{grid-template-columns:1fr}.ns-managed-connector{position:relative;width:auto;min-height:64px;padding:.5rem 0}.ns-managed-connector-path{width:auto;flex-direction:column}.ns-managed-connector-line{width:1.5px;height:24px;flex:none}.ns-managed-connector-arrow{border-top:9px solid #d2d6e0;border-right:6px solid transparent;border-bottom:0;border-left:6px solid transparent}.ns-devin-connectors,.ns-devin-devboxes,.ns-devin-sessions{grid-template-columns:1fr}.ns-devin-desktop-layout{display:none}.ns-devin-mobile-layout{display:block}.ns-devin-mobile-lane+.ns-devin-mobile-lane{margin-top:1.5rem;padding-top:1.5rem;border-top:1px solid var(--ns-diagram-border)}.ns-devin-mobile-connectors{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));padding:0 .5rem}.ns-devin-connector{min-height:80px}.ns-bazel-workers{grid-template-columns:1fr}}"},{"filePath":"style.css","content":":root{--namespace-radius-inline:0.25rem;--namespace-radius-control:0.375rem;--namespace-radius-container:0.5rem}#content-container,.almond-layout>div,.card,.chat-assistant-floating-input>div,.code-block,.frame,.pagination-next,.pagination-prev{border-radius:var(--namespace-radius-container)}.code-block [data-component-part=code-block-root],.frame>div{border-radius:inherit}#assistant-entry,#chat-assistant-textarea,#search-bar-entry,#search-input,.callout,.frame>.relative{border-radius:var(--namespace-radius-control)}.code-block-fade-overlay{border-radius:0 var(--namespace-radius-container) var(--namespace-radius-container) 0}#page-context-menu>button:first-child{border-radius:var(--namespace-radius-control) 0 0 var(--namespace-radius-control)}#page-context-menu>button:last-child{border-radius:0 var(--namespace-radius-control) var(--namespace-radius-control) 0}#content :not(pre)>code,#navigation-items li>a,#navigation-items li>button{border-radius:var(--namespace-radius-inline)}#navigation-items .nav-anchor>:is(svg, img),#navigation-items .sidebar-group-icon,#navigation-items [data-component-part=scroll-area-content]:has(>ul.nav-anchors),#navigation-items li>:is(a, button)>div[class=\"h-[1lh]\"]:first-child{display:flex;flex-direction:column}#navigation-items [data-component-part=scroll-area-content]>ul.nav-anchors{order:1;margin-top:1rem;padding-top:1rem;border-top:1px solid color-mix(in srgb,currentColor 10%,transparent)}#navigation-items [data-component-part=scroll-area-content]>ul.sidebar-group{margin-top:.5rem}#navigation-items [data-component-part=scroll-area-content]>ul.sidebar-group+div{margin-top:1rem}.tab-container{overflow:hidden;padding:0 1rem 1rem;border:1px solid color-mix(in srgb,currentColor 12%,transparent);border-radius:var(--namespace-radius-container)}.tab-container [data-component-part=tab-content]>[data-table-wrapper]:last-child{margin-bottom:0;padding-bottom:0}#content .katex-display>.katex{text-align:left}.compact-table table td{min-width:0}#navigation-items ul.sidebar-group>li.space-y-px+li.space-y-px{margin-top:.75rem}#navigation-items .my-2>.sidebar-group-header{margin-bottom:.625rem;font-size:.8125rem;line-height:1.625rem;font-weight:600;letter-spacing:-.02em;text-transform:none;opacity:1}#navigation-items ul.sidebar-group>li.space-y-px>button{font-size:.8125rem;font-weight:600;letter-spacing:-.02em;background-color:transparent}#navigation-items ul.sidebar-group>li.space-y-px>button:hover,#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>button:hover{background-color:color-mix(in srgb,currentColor 6%,transparent)}#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>button,#navigation-items ul.sidebar-group>li.space-y-px>ul>li>a{padding-left:3rem!important;font-size:.8125rem;font-weight:400;letter-spacing:-.02em}#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>ul>li[data-active-nav-item=true]>a,#navigation-items ul.sidebar-group>li.space-y-px>ul>li[data-active-nav-item=true]>a{color:#121516!important;background-color:rgb(18 21 22/6%)!important}.dark #navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>ul>li[data-active-nav-item=true]>a,.dark #navigation-items ul.sidebar-group>li.space-y-px>ul>li[data-active-nav-item=true]>a{color:#f4f4f5!important;background-color:rgb(255 255 255/8%)!important}#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>button{background-color:transparent}#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>button>div[class=\"h-[1lh]\"]:first-child{margin-left:-1.75rem}.dark #navigation-items img[src*=buildkite-mark]{filter:brightness(.7)}.dark img[src*=\"/icons/apple.svg\"]{filter:invert(1)}.dark img.tab-icon[src*=\"/icons/linux.svg\"]{filter:invert(.35) brightness(1.54)}#navigation-items ul.sidebar-group>li.space-y-px>ul>li.space-y-px>ul>li>a{padding-left:4rem!important;font-size:.8125rem;font-weight:400;letter-spacing:-.02em}@media (min-width:1024px){#sidebar-content{width:calc(16.5rem + 10px)}#content-container{margin-left:calc(16.5rem + 10px)}#navbar{container-type:inline-size}#navbar .nav-tabs{position:fixed;top:0;left:20rem;height:3.5rem;column-gap:2rem}#navbar div:has(>div>.nav-tabs){justify-content:flex-end}@container (max-width: 69rem){#navbar .navbar-link:has(>a[href=\"https://namespace.so/changelog\\"\]){display:none}}}@media (min-width:1280px){#content-container{padding-right:1.5rem;padding-left:3rem}#content-container>div{column-gap:1.5rem;justify-content:flex-start}#content-area{width:calc(100% - 13.5rem);max-width:52rem;flex:none}#content-side-layout{width:15rem;max-width:15rem;flex-basis:15rem}#content-side-layout>div{width:15rem;padding-left:1rem}#content-side-layout>div>div{width:14rem}}@media (min-width:1700px){#content-container>div{justify-content:center}}"},{"filePath":"reference/github-actions/runner-configuration.css","content":""},{"filePath":"workspaces/access.css","content":""},{"filePath":"platform/workspaces/access.css","content":""},{"filePath":"reference/devbox-cli/desktop.css","content":""}],"page":{"pagePath":"workspaces/access","slug":"/workspaces/access","pageMetadata":{"title":"Workspace Access Controls","sidebarTitle":"Access","description":null,"href":"/workspaces/access"},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];const PermissionIcon=({type,color,className})=>{const props={\"aria-hidden\":`true`,className,\"data-slot\":`icon`,height:16,style:{color,display:`inline-block`,verticalAlign:`middle`},viewBox:`0 0 24 24`,width:16};if(type===`check`){return _jsxs(`svg`,{...props,fill:`currentColor`,children:[_jsx(`path`,{clipRule:`evenodd`,d:`M2.25 12c0-5.385 4.365-9.75 9.75-9.75s9.75 4.365 9.75 9.75-4.365 9.75-9.75 9.75S2.25 17.385 2.25 12Zm13.36-1.814a.75.75 0 1 0-1.22-.872l-3.236 4.53L9.53 12.22a.75.75 0 0 0-1.06 1.06l2.25 2.25a.75.75 0 0 0 1.14-.094l3.75-5.25Z`,fillRule:`evenodd`}),_jsx(`path`,{d:`M15.61 10.186a.75.75 0 1 0-1.22-.872l-3.236 4.53L9.53 12.22a.75.75 0 0 0-1.06 1.06l2.25 2.25a.75.75 0 0 0 1.14-.094l3.75-5.25Z`,fill:`white`})]})}return _jsx(`svg`,{...props,fill:`none`,stroke:`currentColor`,strokeWidth:`1.5`,children:_jsx(`path`,{d:`m9.75 9.75 4.5 4.5m0-4.5-4.5 4.5M21 12a9 9 0 1 1-18 0 9 9 0 0 1 18 0Z`,strokeLinecap:`round`,strokeLinejoin:`round`})})};function _createMdxContent(props){const _components={a:`a`,li:`li`,ol:`ol`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{Heading,Table,_MdxComponentBoundary}=_components;if(!Heading)_missingMdxReference(`Heading`,true);if(!Table)_missingMdxReference(`Table`,true);if(!_MdxComponentBoundary)_missingMdxReference(`_MdxComponentBoundary`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Namespace provides comprehensive access control mechanisms to help you manage who can access your workspace and what actions they can perform.\nThis page explains the available authentication methods, role-based access controls, and member management features.`}),`\n`,_jsx(Heading,{level:`2`,id:`authentication-methods`,children:`Authentication Methods`}),`\n`,_jsx(_components.p,{children:`Namespace supports multiple authentication methods to accommodate different organizational requirements and security policies.`}),`\n`,_jsx(Heading,{level:`3`,id:`social-login-options`,children:`Social Login Options`}),`\n`,_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`Google SSO`}),`: Members can sign in using their Google accounts, providing seamless integration with Google Workspace environments.`]}),`\n`,_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`GitHub SSO`}),`: Authenticate using GitHub credentials, ideal for development teams already using GitHub for version control.`]}),`\n`,_jsx(Heading,{level:`3`,id:`enterprise-authentication`,children:`Enterprise Authentication`}),`\n`,_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`SAML SSO`}),`: Available for enterprise customers, SAML single sign-on provides integration with your organization’s identity provider such as Okta, OneLogin, or Auth0.`]}),`\n`,_jsx(_components.p,{children:`Enterprise customers can configure advanced SAML SSO options for enhanced security and user management:`}),`\n`,_jsx(Heading,{level:`4`,id:`automatic-workspace-joining`,children:`Automatic Workspace Joining`}),`\n`,_jsx(_components.p,{children:`Configure your SAML SSO integration to automatically grant workspace access to any member from your organization who authenticates through your identity provider.\nYou can configure a default role that new members assume on workspace signup.\nThis streamlines onboarding and ensures all team members have appropriate access.`}),`\n`,_jsx(Heading,{level:`4`,id:`enforced-sso-authentication`,children:`Enforced SSO Authentication`}),`\n`,_jsx(_components.p,{children:`Enhance security by requiring all workspace members to sign in exclusively through your organization’s identity provider, ensuring consistent security policies across your organization.\nWhen this option is enabled, social login methods (Google and GitHub) are disabled for all workspace members.`}),`\n`,_jsx(Heading,{level:`4`,id:`custom-session-durations`,children:`Custom Session Durations`}),`\n`,_jsx(_components.p,{children:`Configure custom session durations for SAML SSO logins to meet your organization’s security requirements.\nOnce the maximum session length (default is one hour) is reached, re-authentication is required.\nNamespace also supports different session policies for different user roles.`}),`\n`,_jsx(Heading,{level:`4`,id:`scim`,children:`Group-Based Role Updates (SCIM)`}),`\n`,_jsx(_components.p,{children:`Namespace supports directory sync via SCIM, allowing you to manage workspace membership and roles directly from your identity provider.\nWhen a directory sync is configured, group membership changes in your identity provider automatically propagate to Namespace: users are added or removed from the workspace, and their workspace roles are updated based on the group-to-role mapping.`}),`\n`,_jsxs(_components.p,{children:[`Once directory sync is set up, management of the group-to-role mapping is self-service.\nFrom the managed SSO domain entry in your `,_jsx(_components.a,{href:`https://cloud.namespace.so/workspace/settings/users\`,children:\`workspace settings`}),`, workspace owners and admins can click `,_jsx(_components.strong,{children:`Manage Groups`}),` to open the directory-sync admin portal and configure how identity provider groups map to Namespace roles.\nDirectory role mappings can assign the Admin, Editor, Devbox User, Accountant, or Reader role.`]}),`\n`,_jsxs(_components.p,{children:[`To enable directory sync for your workspace, contact our `,_jsx(_components.a,{href:`mailto:support@namespace.so`,children:`support team`}),`.`]}),`\n`,_jsx(Heading,{level:`2`,id:`adding-members`,children:`Adding Members`}),`\n`,_jsxs(_components.p,{children:[`You can invite new members to your workspace manually using two convenient methods.\nAny invite expires after a week unless revoked by the inviter ahead of time.\nIf your workspace is connected to your organization’s identity provider, you can also grant workspace access to `,_jsx(_components.a,{href:`#automatic-workspace-joining`,children:`any member from your organization`}),`.`]}),`\n`,_jsx(Heading,{level:`3`,id:`invite-links`,children:`Invite Links`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`Navigate to your `,_jsx(_components.a,{href:`https://cloud.namespace.so/workspace/settings/users\`,children:\`workspace settings`})]}),`\n`,_jsx(_components.li,{children:`Choose “Generate link”`}),`\n`,_jsx(_components.li,{children:`Share the link with the new workspace member`}),`\n`]}),`\n`,_jsx(_components.p,{children:`Invite links become invalid after a user accepts the invite.`}),`\n`,_jsx(Heading,{level:`3`,id:`invite-emails`,children:`Invite Emails`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[`Navigate to your `,_jsx(_components.a,{href:`https://cloud.namespace.so/workspace/settings/users\`,children:\`workspace settings`})]}),`\n`,_jsx(_components.li,{children:`Choose “Invite by email”`}),`\n`,_jsx(_components.li,{children:`Enter the email addresses to invite`}),`\n`]}),`\n`,_jsx(Heading,{level:`2`,id:`rbac`,children:`Role-Based Access Control (RBAC)`}),`\n`,_jsx(_components.p,{children:`Namespace supports comprehensive role-based access control with six distinct roles, each providing different levels of access and permissions:`}),`\n`,_jsx(Heading,{level:`3`,id:`supported-roles`,children:`Supported Roles`}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Owner`}),`: Full administrative control, main contact point, cannot be removed from the workspace`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Admin`}),`: Full administrative control`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Editor`}),`: Can modify workspace content and configurations`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Devbox User`}),`: Can create, use, and manage their own Devboxes`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Accountant`}),`: Access to billing and usage information`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Reader`}),`: View-only access to workspace resources`]}),`\n`]}),`\n`,_jsxs(_components.p,{children:[`Only business and enterprise accounts have full access to RBAC.\nFor a full overview of the features included in each plan, visit `,_jsx(_components.a,{href:`https://namespace.so/pricing\`,children:\`the pricing page`}),`.`]}),`\n`,_jsx(Heading,{level:`3`,id:`role-permissions-matrix`,children:`Role Permissions Matrix`}),`\n`,_jsx(`div`,{className:`role-permissions-matrix`,children:_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Action`}),_jsx(_components.th,{children:`Owner`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Editor`}),_jsx(_components.th,{children:`Devbox User`}),_jsx(_components.th,{children:`Accountant`}),_jsx(_components.th,{children:`Reader`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`User management`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Billing and Plan`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Connect GitHub organizations`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Delete a Workspace`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`View Audit Logs`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Notification settings`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Manage Vault Secrets`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Manage all Devboxes`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Start Builds \u0026 Instances`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Release Cache Volumes`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Create Devboxes`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`SSH/VNC`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`x`,color:`gray`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`View Instances`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`View Builds`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`View GitHub Actions`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Usage explorer`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Access previews`}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})}),_jsx(_components.td,{children:_jsx(_MdxComponentBoundary,{name:`PermissionIcon`,children:_jsx(PermissionIcon,{type:`check`,className:`text-primary`})})})]})]})]})}),`\n`,_jsx(Heading,{level:`2`,id:`workload-access`,children:`Workload Access`}),`\n`,_jsxs(_components.p,{children:[`Each `,_jsx(_components.a,{href:`/architecture/compute`,children:`compute instance`}),` receives a dedicated workload token, granting access to Namespace features and APIs.\nThe token uniquely identifies the instance ensuring any entry in our immutable `,_jsx(_components.a,{href:`/security/auditlog`,children:`audit log`}),` can be traced back to the source.\nBy default, workload tokens allow access to any Namespace feature, enabling frictionless feature composition.\nThese permissions can be dynamically configured, allowing enterprise customers to enforce fine-grained access policies on which features may be accessed.`]}),`\n`,_jsx(Heading,{level:`2`,id:`support-and-configuration`,children:`Support and Configuration`}),`\n`,_jsxs(_components.p,{children:[`For assistance with configuring advanced access controls or enterprise SSO integration, contact our `,_jsx(_components.a,{href:`mailto:support@namespace.so`,children:`support team`}),`.\nOur team can help with SAML SSO setup, custom authentication requirements, and security policy implementation.`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{PermissionIcon,default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Workspace Access Controls","sidebarTitle":"Access","description":null,"href":"/workspaces/access"}}},"mdxSourceWithNoJs":null,"noJsSplices":[[150,1100,")=>null;function _cr"]]},"mdxExtracts":{"tableOfContents":[{"title":"Authentication Methods","slug":"authentication-methods","depth":2,"children":[{"title":"Social Login Options","slug":"social-login-options","depth":3,"children":[]},{"title":"Enterprise Authentication","slug":"enterprise-authentication","depth":3,"children":[]},{"title":"Automatic Workspace Joining","slug":"automatic-workspace-joining","depth":4,"children":[]},{"title":"Enforced SSO Authentication","slug":"enforced-sso-authentication","depth":4,"children":[]},{"title":"Custom Session Durations","slug":"custom-session-durations","depth":4,"children":[]},{"title":"Group-Based Role Updates (SCIM)","slug":"scim","depth":4,"children":[]}]},{"title":"Adding Members","slug":"adding-members","depth":2,"children":[{"title":"Invite Links","slug":"invite-links","depth":3,"children":[]},{"title":"Invite Emails","slug":"invite-emails","depth":3,"children":[]}]},{"title":"Role-Based Access Control (RBAC)","slug":"rbac","depth":2,"children":[{"title":"Supported Roles","slug":"supported-roles","depth":3,"children":[]},{"title":"Role Permissions Matrix","slug":"role-permissions-matrix","depth":3,"children":[]}]},{"title":"Workload Access","slug":"workload-access","depth":2,"children":[]},{"title":"Support and Configuration","slug":"support-and-configuration","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":["/docs/_mintlify/custom/namespace-labs/fa018fe02fd436c8/navigation.js","/docs/_mintlify/custom/namespace-labs/4276600b7cb636ff/legacy-anchor-redirects.js"],"subdomain":"namespace-labs","siteName":"Namespace Documentation","title":"Workspace Access Controls - Namespace Documentation","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-26T10:46:17.398Z","gitLastModified":"2026-09-16T13:18:27.000Z","originalFileLocation":"workspaces/access.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"application-name\" content=\"Namespace Documentation\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Workspace Access Controls - Namespace Documentation\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Namespace Documentation\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://namespace.so/docs/workspaces/access\\">\\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://namespace-labs.mintlify.app/\_mintlify/api/og/v2?division=Workspaces\\u0026amp;title=Workspace+Access+Controls\\u0026amp;theme=1f89d53762a6d5304d1c63c4\\u0026amp;signature=0b7e370607981a5c2fa20141898392f5b5a1bb76c672456a3a21dd38a8f3cbb7\\">\\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Workspace Access Controls - Namespace Documentation\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://namespace-labs.mintlify.app/\_mintlify/api/og/v2?division=Workspaces\\u0026amp;title=Workspace+Access+Controls\\u0026amp;theme=1f89d53762a6d5304d1c63c4\\u0026amp;signature=0b7e370607981a5c2fa20141898392f5b5a1bb76c672456a3a21dd38a8f3cbb7\\">\\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/docs/mintlify-assets/_mintlify/favicons/namespace-labs/kZKeJ4zhJEuE6_kI/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Namespace Documentation\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#1C32FF\">\u003clink data-mint-head rel=\"canonical\" href=\"https://namespace.so/docs/workspaces/access\\">\\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/docs/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/workspaces/access.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\\",\\"@graph\\":\[{\\"@type\\":\\"Organization\\",\\"@id\\":\\"https://namespace.so/#organization\\",\\"name\\":\\"Namespace Documentation\",\"url\":\"https://namespace.so\\",\\"logo\\":{\\"@type\\":\\"ImageObject\\",\\"url\\":\\"https://mintcdn.com/namespace-labs/qOJQ7kaWRgoS8lyv/logo-light.svg?fit=max\\u0026auto=format\\u0026n=qOJQ7kaWRgoS8lyv\\u0026q=85\\u0026s=6827b0c81c335badc1cef13b83383e1d\\"}},{\\"@type\\":\\"WebSite\\",\\"@id\\":\\"https://namespace.so/docs#website\\",\\"name\\":\\"Namespace Documentation\",\"url\":\"https://namespace.so/docs\\",\\"publisher\\":{\\"@id\\":\\"https://namespace.so/#organization\\"}},{\\"@type\\":\\"WebPage\\",\\"@id\\":\\"https://namespace.so/docs/workspaces/access#webpage\\",\\"url\\":\\"https://namespace.so/docs/workspaces/access\\",\\"name\\":\\"Workspace Access Controls\",\"dateModified\":\"2026-09-16T13:18:27.000Z\",\"isPartOf\":{\"@id\":\"https://namespace.so/docs#website\\"},\\"breadcrumb\\":{\\"@id\\":\\"https://namespace.so/docs/workspaces/access#breadcrumb\\"}},{\\"@type\\":\\"BreadcrumbList\\",\\"@id\\":\\"https://namespace.so/docs/workspaces/access#breadcrumb\\",\\"itemListElement\\":\[{\\"@type\\":\\"ListItem\\",\\"position\\":1,\\"name\\":\\"Administration\\",\\"item\\":\\"https://namespace.so/docs/workspaces/index\\"},{\\"@type\\":\\"ListItem\\",\\"position\\":2,\\"name\\":\\"Workspaces\\",\\"item\\":\\"https://namespace.so/docs/workspaces/index\\"},{\\"@type\\":\\"ListItem\\",\\"position\\":3,\\"name\\":\\"Workspace Access Controls\",\"item\":\"https://namespace.so/docs/workspaces/access\\"}\]},{\\"@type\\":\[\\"Article\\",\\"TechArticle\\"\],\\"@id\\":\\"https://namespace.so/docs/workspaces/access#article\\",\\"headline\\":\\"Workspace Access Controls\",\"name\":\"Workspace Access Controls\",\"url\":\"https://namespace.so/docs/workspaces/access\\",\\"mainEntityOfPage\\":{\\"@id\\":\\"https://namespace.so/docs/workspaces/access#webpage\\"},\\"dateModified\\":\\"2026-09-16T13:18:27.000Z\\",\\"publisher\\":{\\"@id\\":\\"https://namespace.so/#organization\\"},\\"isPartOf\\":{\\"@id\\":\\"https://namespace.so/docs#website\\"}}\]}\\u003c/script>\\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\\",\\"@type\\":\\"WebSite\\",\\"name\\":\\"Namespace Documentation\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\\"}}\\u003c/script>","siteName":"Namespace Documentation","nav":{"global":{"anchors":[{"anchor":"Changelog","icon":"history","href":"https://namespace.so/changelog"},{"anchor":"Trust Center (SOC2)","icon":"shield-check","href":"https://trust.namespace.so/"},{"anchor":"Status","icon":"activity","href":"https://namespace-status.com/"},{"anchor":"Support","icon":"message-circle","href":"https://namespace.so/support"}\]},"products":\[{"product":"Products","description":"Turnkey products built on the Namespace platform","tabs":[{"tab":"Documentation","icon":"book-open","pages":[{"title":"Namespace Documentation","sidebarTitle":"Overview","href":""},{"group":"Products","pages":[{"group":"GitHub Actions","icon":"github","pages":[{"title":"Accelerate your GitHub Actions with Namespace","sidebarTitle":"Getting Started","href":"/solutions/github-actions/index"},{"group":"Cache Volumes","pages":[{"title":"Caching in GitHub Actions","sidebarTitle":"Overview","href":"/solutions/github-actions/caching/index"},{"title":"Container Images","href":"/solutions/github-actions/caching/container-images"},{"title":"Git Checkouts","href":"/solutions/github-actions/caching/git-checkouts"},{"title":"Toolchains","sidebarTitle":"Toolchains","href":"/solutions/github-actions/caching/toolchains"},{"title":"Actions","sidebarTitle":"Actions","href":"/solutions/github-actions/caching/actions"},{"title":"Build System Integrations","sidebarTitle":"Build Systems","href":"/solutions/github-actions/caching/build-systems"},{"title":"Troubleshooting cache volumes","sidebarTitle":"Troubleshooting","href":"/solutions/github-actions/caching/troubleshooting"}]},{"title":"Fast repository checkouts with Git snapshots","sidebarTitle":"Git Snapshots","href":"/solutions/github-actions/git-snapshots"},{"title":"Optimizing Docker build performance","sidebarTitle":"Docker Builds","href":"/solutions/github-actions/docker-builds"},{"title":"Custom base images for GitHub Actions","sidebarTitle":"Custom Base Images","href":"/solutions/github-actions/custom-base-images/index"},{"group":"Debugging","pages":[{"title":"Debugging GitHub Actions","sidebarTitle":"Overview","href":"/solutions/github-actions/debugging/index"},{"title":"Interactive Access","href":"/solutions/github-actions/debugging/interactive-access"},{"title":"Remote Display","href":"/solutions/github-actions/debugging/remote-display"},{"title":"Performance Metrics","href":"/solutions/github-actions/debugging/performance-metrics"},{"title":"Advanced Logging","href":"/solutions/github-actions/debugging/logging"},{"title":"Out of memory (OOM) detection","sidebarTitle":"OOM Detection","href":"/solutions/github-actions/debugging/oom-detection"},{"title":"Crash Dumps","href":"/solutions/github-actions/debugging/crash-dumps"},{"title":"Queue Time","href":"/solutions/github-actions/debugging/queue-time"}]},{"group":"Runner Controls","pages":[{"title":"Runner Controls","sidebarTitle":"Overview","href":"/solutions/github-actions/runner-controls"},{"title":"Concurrent runners","href":"/solutions/github-actions/runner-controls/concurrent-runners"},{"title":"Job Ordering \u0026 Priority","sidebarTitle":"Job Ordering","href":"/solutions/github-actions/runner-controls/job-ordering"},{"title":"Privileged Workflows","sidebarTitle":"Privileged Workflows","href":"/solutions/github-actions/runner-controls/privileged-workflows"},{"title":"Landlock","sidebarTitle":"Landlock","href":"/solutions/github-actions/runner-controls/landlock"},{"title":"Swap Space","sidebarTitle":"Swap Space","href":"/solutions/github-actions/runner-controls/swap"},{"title":"Tailscale","sidebarTitle":"Tailscale","href":"/solutions/github-actions/runner-controls/tailscale"},{"title":"Access Levels","sidebarTitle":"Access Levels","href":"/solutions/github-actions/runner-controls/access-levels"},{"title":"Running jobs in containers","sidebarTitle":"Containerized Jobs","href":"/solutions/github-actions/runner-controls/containerized-jobs"}]},{"title":"Optimizing Usage","href":"/solutions/github-actions/optimizing-usage"},{"title":"Runner Labels","sidebarTitle":"Runner Labels","href":"/reference/github-actions/runner-configuration"},{"group":"Actions","expanded":false,"pages":[{"title":"nscloud-setup","href":"/reference/github-actions/nscloud-setup"},{"title":"nscloud-setup-buildx-action","href":"/reference/github-actions/nscloud-setup-buildx-action"},{"title":"nscloud-cluster-action","href":"/reference/github-actions/nscloud-cluster-action"},{"title":"nscloud-cache-action","href":"/reference/github-actions/nscloud-cache-action"},{"title":"nscloud-checkout-action","href":"/reference/github-actions/nscloud-checkout-action"},{"title":"nscloud-expose-kubernetes-action","href":"/reference/github-actions/nscloud-expose-kubernetes-action"},{"title":"breakpoint-action","href":"/reference/github-actions/breakpoint"},{"title":"upload-artifact","href":"/reference/github-actions/upload-artifact"},{"title":"download-artifact","href":"/reference/github-actions/download-artifact"},{"title":"setup-turbocache","href":"/reference/github-actions/setup-turbocache"}]}]},{"group":"Devboxes","icon":"container","pages":[{"title":"High-Performance Developer Environments with Devboxes","sidebarTitle":"Getting Started","href":"/devbox/index"},{"group":"Managing Devboxes","expanded":false,"pages":[{"title":"Devbox Lifecycle","sidebarTitle":"Lifecycle","href":"/devbox/lifecycle"},{"title":"Devbox Blueprints","sidebarTitle":"Blueprints","href":"/devbox/blueprint"},{"title":"Devbox Services","sidebarTitle":"Services","href":"/devbox/services"},{"title":"Shareable URLs","href":"/devbox/url"},{"title":"Custom Images","href":"/devbox/images"}]},{"group":"Working in a Devbox","expanded":false,"pages":[{"title":"Connecting to a Devbox","sidebarTitle":"SSH \u0026 Sessions","href":"/devbox/connecting"},{"title":"Executing Commands","href":"/devbox/exec"},{"title":"Running long tasks","sidebarTitle":"Long Running Tasks","href":"/guides/devbox/long-running-tasks"},{"title":"Computer Controls","sidebarTitle":"Computer Use","href":"/devbox/computer-use"},{"title":"Remote Desktop","sidebarTitle":"Remote Desktop","href":"/devbox/remote-desktop"},{"title":"Open IDE","href":"/devbox/ides"}]},{"group":"Managed Agents","tag":"Integrations","expanded":false,"pages":[{"title":"Amp Orbs","sidebarTitle":"Amp Orbs","href":"/integrations/amp"},{"title":"Claude Managed Agents","sidebarTitle":"Claude Managed Agents","href":"/integrations/claude"},{"title":"Cursor Cloud Agents","sidebarTitle":"Cursor Cloud Agents","href":"/integrations/cursor"},{"title":"Devin on Devboxes","sidebarTitle":"Devin","href":"/integrations/devin"}]}]},{"group":"Bazel","icon":"hammer","pages":[{"title":"Speed up your Bazel builds with Namespace","sidebarTitle":"Introduction","href":"/bazel/index"},{"title":"Bazel cache","sidebarTitle":"Caching","href":"/bazel/cache"},{"title":"Bazel Remote Execution","sidebarTitle":"Remote Build Execution","href":"/bazel/execution"},{"title":"Bazel observability","sidebarTitle":"Observability","href":"/bazel/observability"}]},{"group":"Docker Builders","icon":"container","pages":[{"title":"Speed up your Docker Builds with Namespace","sidebarTitle":"Getting Started","href":"/solutions/docker-builders/index"},{"title":"Container Registry","href":"/solutions/docker-builders/registry"},{"title":"Docker Build Observability","sidebarTitle":"Tracing \u0026 Logs","href":"/solutions/docker-builders/tracing-and-logs"}]},{"group":"Buildkite Agents","icon":"workflow","pages":[{"title":"Run Buildkite Jobs on Namespace","sidebarTitle":"Getting Started","href":"/solutions/buildkite-agents/index"},{"title":"Managing Buildkite Queues","sidebarTitle":"Managing Queues","href":"/solutions/buildkite-agents/managing-queues"},{"title":"Configure Buildkite Agents","sidebarTitle":"Configuration","href":"/solutions/buildkite-agents/configuration"},{"title":"Fast repository checkouts with Git snapshots","sidebarTitle":"Git Snapshots","href":"/solutions/buildkite-agents/git-snapshots"}]}]},{"group":"Platform","pages":[{"group":"Compute","icon":"cpu","pages":[{"title":"Compute Platform","sidebarTitle":"Overview","href":"/architecture/compute/index"},{"title":"Linux","href":"/architecture/compute/linux"},{"title":"macOS","href":"/architecture/compute/macos"},{"title":"Windows","href":"/architecture/compute/windows"},{"title":"Observability","href":"/architecture/compute/observability"},{"title":"SSH / Remote Display with Namespace Compute","sidebarTitle":"SSH / Remote Display","href":"/architecture/compute/ssh-remote-display"},{"title":"Machine Shapes","href":"/architecture/compute/machine-shapes"},{"title":"Resource Limits","href":"/architecture/compute/resource-limits"}]},{"group":"Storage","icon":"database","pages":[{"title":"Storage","sidebarTitle":"Overview","href":"/architecture/storage/index"},{"title":"Cache Volumes","href":"/architecture/storage/cache-volumes"},{"title":"Container Registry","href":"/architecture/storage/container-registry"},{"title":"Artifact Storage","href":"/architecture/storage/artifact-storage"},{"title":"Secrets","href":"/architecture/storage/secrets"}]},{"group":"Networking","icon":"network","pages":[{"title":"Networking","sidebarTitle":"Overview","href":"/architecture/networking/index"},{"title":"Ingress","href":"/architecture/networking/ingress"},{"title":"Network Performance Optimizations","sidebarTitle":"Performance","href":"/architecture/networking/performance"},{"title":"Network Security","sidebarTitle":"Security","href":"/architecture/networking/security"},{"title":"Egress policies","href":"/security/egress-policy"}]}]},{"group":"Administration","pages":[{"group":"Workspaces","icon":"briefcase-business","pages":[{"title":"Workspaces","sidebarTitle":"Overview","description":null,"href":"/workspaces/index"},{"title":"Workspace Access Controls","sidebarTitle":"Access","href":"/workspaces/access"},{"title":"Billing \u0026 Included Amounts","sidebarTitle":"Billing and limits","description":null,"href":"/workspaces/billing-and-limits"},{"title":"Data Residency for Workspaces","sidebarTitle":"Data residency","href":"/workspaces/data-residency"},{"title":"Security \u0026 Compliance","sidebarTitle":"Security","href":"/workspaces/security"},{"title":"Audit Logs","sidebarTitle":"Audit logging","href":"/security/auditlog"},{"title":"Permissions","href":"/security/permissions"}]},{"group":"Federation","icon":"shield-check","pages":[{"title":"Workload Federation","sidebarTitle":"Overview","href":"/federation/index"},{"title":"Workload Federation with AWS","sidebarTitle":"AWS","href":"/federation/aws"},{"title":"Workload Federation with GCP","sidebarTitle":"GCP","href":"/federation/gcp"},{"title":"Workload Federation with OpenID Connect","sidebarTitle":"OpenID","href":"/federation/openid"},{"title":"Identity Federation with GitHub Actions","sidebarTitle":"Github Actions","href":"/federation/github-actions"},{"title":"Identity Federation with CircleCI","sidebarTitle":"CircleCI","href":"/federation/circleci"},{"title":"Identity Federation with RWX","sidebarTitle":"RWX","href":"/federation/rwx"}]},{"group":"Dashboard","icon":"layout-dashboard","pages":[{"title":"GitHub Actions Overview","sidebarTitle":"GitHub Actions","href":"/dashboard/github-actions"},{"title":"Builds UI","sidebarTitle":"Builds","href":"/dashboard/builds"},{"title":"Registry UI","sidebarTitle":"Registry","href":"/dashboard/registry"},{"title":"Usage Explorer","href":"/dashboard/usage-explorer"}]}]}]},{"tab":"Integrations","icon":"blocks","pages":[{"title":"Integrations","href":"/integrations/turborepo"}]},{"tab":"CLI","icon":"square-terminal","pages":[{"title":"CLI","href":"/reference/cli"}]},{"tab":"SDK","icon":"braces","pages":[{"title":"SDK","href":"/reference/sdk"}]},{"tab":"MCP","icon":"plug","pages":[{"title":"MCP","href":"/reference/mcp"}]}]},{"product":"Platform","description":"Lower-level primitives to build your own","pages":[{"title":"Platform","href":"/platform"}]}]},"title":"Workspace Access Controls - Namespace Documentation","buildId":"dpl_GvhK4qVXq51DpfYJLCtPpYNN4YHN","deploymentId":"dpl_GvhK4qVXq51DpfYJLCtPpYNN4YHN","dynamics":[],"chunks":[]}