Assign the workspace manager role
A workspace manager is a member of a workspace with certain management privileges in that given workspace. This is an optional role in a workspace, since administrators can manage workspaces as required. Any number of user accounts can be designated as manager for a given workspace.
The organization administrator configures the initial manager for a given workspace. Users with workspace manager privileges can grant and revoke that role for other workspace members.
Users assigned this role can do the following for the managed workspace only:
- Edit the workspace profile, including branding, description, and naming.
- Add, manage, and remove workspace members, including granting and removing manager privileges.
- Create and manage groups.
- View workspace activity.
- In the Packages app, create, manage, and delete shared inboxes (including metadata and shared inbox members).
- In the Files app, share folders from storage to one or more workspace members (requires node secret).
- If specifically granted by the org admin:
- Manage settings for the Files and Packages apps in that workspace.
- Configure email notification templates and delivery options.
To create a new user, see Create and manage users.
- Go to Workspaces > workspaceName > Members.
- Browse or filter for the intended user or group, then click the row to open the user
record.
If the intended user is not a member of this workspace, click Add members, select Manager, and click Add.
- Select the checkbox labeled This member can manage this
workspace.
Remove workspace manager privileges by clearing the checkbox.
- Click Save.
Remember that any given user or group may have both direct and indirect roles and memberships; to remove workspace manager privileges for a user, you may have to remove them from a group with workspace manager privileges as well. For details, see Direct and inherited memberships.
Configure workspace manager auto-complete privacy
This setting determines which users and groups a workspace manager can see through the auto-complete function. Auto-complete acts when entering user or group names during the following operations:
- Adding members to a workspace, group, shared inbox, or shared folder.
- Sending package (recipients field).
- Sharing submission link (recipients field).
Such visibility is especially sensitive in a multi-tenant or reseller organization when strict separation between workspaces within the organization is required to ensure privacy for tenants.
- By default, workspace managers can see all users and groups in the entire organization, including in workspaces in which they are not members, along with the personal contacts of all users (including outside users).
- Alternatively, workspace managers can see only users and groups from the workspaces in which they are members, along with their own personal contacts in any workspace and with outside users.
Keep in mind that the alternative setting does not prevent workspace managers from adding users or recipients beyond their own contacts. But contacts beyond their own will not appear as selections through auto-complete. Instead, workspace managers must enter the entire username or email address manually.
Note: Workspace and application collaboration settings also affect the way workspace managers can interact with users outside the workspace and organization.
To configure this setting for your organization, do the following:
- Go to Organization > Advanced settings > Workspace manager privileges.
- Select the desired setting, then click Save.