Using the dashboard

Workspaces and members

Your organisation in Identise: who may create one, inviting your team, roles, and the audit log.

A workspace holds your applications, their API keys, your team and an audit log. My Workspaces lists the ones you own or were invited to.

Creating a workspace (invite-only)

For now, creating workspaces is invite-only. On My Workspaces you see New Workspace only if you may create one; otherwise a note says creation is invite-only, and you can still work in any workspace you're invited to.

You may create workspaces if you are Identise staff, or if your verified email is on the list the Identise operators keep. Verification matters: anyone can register an address, but only verifying it proves it's yours, so verify your email first under Personal Info.

Want to create a workspace? Ask the Identise team to add your verified email to the list.

For operators: the list

The list is configuration of the API, not a database table:

appsettings.json

"WorkspaceCreation": {
  "InviteOnly": true,
  "AllowedEmails": [ "founder@yourcompany.com", "cto@yourcompany.com" ]
}

Or as environment variables, as in docker-compose.yml:

bash

WorkspaceCreation__AllowedEmails__0=founder@yourcompany.com
WorkspaceCreation__AllowedEmails__1=cto@yourcompany.com

Emails compare case-insensitively. InviteOnly defaults to true, so with no list only staff can create workspaces; set it to false to let every signed-in user create them. Restart the API after changing the list. Anyone who calls the API directly without being on it gets 403 Workspace.InviteOnly.

Members and roles

Members lists who has access. Invite Member adds someone by email with a role:

Role	Can
Owner (whoever created the workspace)	Everything, including deleting the workspace. Can't be removed.
Admin	Everything in the workspace: applications, API keys, members, settings.
Member	View the workspace and its applications, and manage API keys.

If the person has no Identise account yet, one is created for their email; they set a password with Forgot password? on the sign-in page.

Audit logs

Each workspace's Audit Logs record who did what (creating applications, generating keys, changing members…), when, from which IP address and browser, and whether it succeeded. Secrets such as API keys and tokens are never written to it. Entries are kept for a year.