Workspaces & teams
Share workflows, credentials, and data with teammates using workspace-scoped resources and role-based access control.
A workspace is a shared container for all of your Pipory resources: workflows, credentials, variables, data tables, saved templates, and webhook destinations. By default every account gets a personal workspace. You can create additional workspaces and invite teammates to any of them.
Creating and switching workspaces
Click your workspace name in the sidebar header to open the workspace switcher. From there you can:
- Switch to any workspace you're a member of.
- Create a new workspace (you become its owner).
The active workspace is what every resource list shows and every new resource is created under.
Inviting teammates
Open Workspace > Members from the sidebar. Click Invite member to generate a shareable invite link - anyone with a signed-in Pipory account can open the link and join the workspace. Links have no expiry but can only be used once to add a given account.
Roles
Every workspace member has exactly one role. Roles are cumulative from the bottom up:
| Role | Read resources | Create / edit / delete resources & run workflows | Manage members & workspace settings |
|---|---|---|---|
| VIEWER | ✓ | — | — |
| EDITOR | ✓ | ✓ | — |
| ADMIN | ✓ | ✓ | ✓ |
| OWNER | ✓ | ✓ | ✓ |
The workspace owner is the account that created it. An owner can transfer ownership or delete the workspace; personal workspaces (the one auto-created for each account) cannot be deleted.
Shared credentials
Credentials belong to the workspace, not the individual member who created them. Every EDITOR/ADMIN/OWNER can create, edit, and delete credentials; every VIEWER can see and use them (via the node's credential dropdown) without ever seeing the plaintext secret. This means a team can share a single Slack bot token or Anthropic API key without anyone distributing raw secrets.
Audit log
OWNER and ADMIN members can view the workspace's audit log at Workspace > Audit log: a searchable, filterable chronological trail of every significant mutation (workflow published, credential deleted, member role changed, and so on) with the actor and a timestamp. See Audit log below.
Audit log entries are kept for 90 days by default. Owners can change this under Account > Webhooks & retention.
Related
- Credentials - how credential scoping works across workspace members.
- AI governance - per-workspace AI usage caps and kill switch.
- Audit log - tracking who changed what.