Enterprise > Team management
Workspaces
# Workspaces A workspace groups one or more teams under a single Enterprise account. Workspace admins manage membership, billing, and company-wide policies across those teams. Single Sign-On (SSO) is configured at the workspace level. ## Workspaces and teams A workspace provides company-wide administration, while teams organize shared resources and team-level settings. * **Workspace level** - Billing, SSO, domain capture, and organization-wide policies apply across teams. * **Team level** - Members share Warp Drive resources, cloud agent runs, environments, and secrets. * **Membership** - A user belongs to one workspace and can belong to multiple teams within it. ## Workspace roles Every workspace member has one of three roles: * **Member** - Uses Warp within their teams and the policies admins configure. * **Admin** - Manages workspace membership, billing, and settings. Admins can view and manage every team, including teams they don't belong to. * **Owner** - Has every admin capability and can transfer ownership to another member. Each workspace has one owner. In team member lists, the **Workspace admin** and **Workspace owner** badges distinguish workspace roles from team roles. ## Teams inside a workspace Workspace admins create teams from the Admin Panel and choose a visibility: * **Open** - Any workspace member can see the team and join it immediately. * **Hidden** - The team doesn't appear in team discovery; an admin adds members directly. Workspace admins can also manage every team's membership and settings. ## Joining a workspace or team Workspace admins add users through invitations or domain capture: * **Workspace invite links** - Add a user to the workspace and let them choose an Open team. * **Team invite links** - Add a user to an Open team and its workspace. * **Email invites** - Add a user directly to a workspace or team. Admins add users to Hidden teams this way. * **Domain capture** - Automatically adds users who sign up with a verified company domain. * **Team discovery** - Shows Open teams to unassigned users in the Warp app under **Settings** > **Teams**. ## Unassigned users An unassigned user belongs to the workspace but not to a team. Workspace admins can manage unassigned users and set a separate per-user spend limit for them in the Admin Panel. Unassigned users cannot start cloud agent or factory runs until they join a team. Workspace-level billing and policies still apply to them. ## Workspace settings and team settings Workspace admins configure company-wide policies in the [Admin Panel](/enterprise/team-management/admin-panel/). For supported settings, they can enforce a value across the workspace or select **Respect Team Setting** to let each team decide. SSO and domain capture apply at the workspace level. When a workspace admin enforces a setting, team admins see it as locked. ## Workspace spend limits Workspace admins can set monthly limits for total, local agent, and cloud agent spending. They can also set a separate per-user limit for unassigned users. Team and individual limits remain independent, and the first applicable limit reached blocks further usage within its scope. {/* VERIFY: confirm what team admins see when a workspace limit blocks usage before documenting that notice */} ## Related pages * [Team management](/enterprise/team-management/teams/) - Create and manage teams * [Admin Panel](/enterprise/team-management/admin-panel/) - Configure settings enforced across a workspace or team * [Roles and permissions](/enterprise/team-management/roles-and-permissions/) - Team-level roles and what each can do * [Single Sign-On (SSO)](/enterprise/security-and-compliance/sso/) - Configure authentication for a workspace * [Enterprise billing](/enterprise/support-and-resources/billing/) - Credit pools, spend limits, and billing managementTell me about this feature: https://docs.warp.dev/enterprise/team-management/workspaces/Workspaces group teams under one Enterprise account with shared membership, billing, SSO, and company-wide settings.
A workspace groups one or more teams under a single Enterprise account. Workspace admins manage membership, billing, and company-wide policies across those teams. Single Sign-On (SSO) is configured at the workspace level.
Workspaces and teams
Section titled “Workspaces and teams”A workspace provides company-wide administration, while teams organize shared resources and team-level settings.
- Workspace level - Billing, SSO, domain capture, and organization-wide policies apply across teams.
- Team level - Members share Warp Drive resources, cloud agent runs, environments, and secrets.
- Membership - A user belongs to one workspace and can belong to multiple teams within it.
Workspace roles
Section titled “Workspace roles”Every workspace member has one of three roles:
- Member - Uses Warp within their teams and the policies admins configure.
- Admin - Manages workspace membership, billing, and settings. Admins can view and manage every team, including teams they don’t belong to.
- Owner - Has every admin capability and can transfer ownership to another member. Each workspace has one owner.
In team member lists, the Workspace admin and Workspace owner badges distinguish workspace roles from team roles.
Teams inside a workspace
Section titled “Teams inside a workspace”Workspace admins create teams from the Admin Panel and choose a visibility:
- Open - Any workspace member can see the team and join it immediately.
- Hidden - The team doesn’t appear in team discovery; an admin adds members directly.
Workspace admins can also manage every team’s membership and settings.
Joining a workspace or team
Section titled “Joining a workspace or team”Workspace admins add users through invitations or domain capture:
- Workspace invite links - Add a user to the workspace and let them choose an Open team.
- Team invite links - Add a user to an Open team and its workspace.
- Email invites - Add a user directly to a workspace or team. Admins add users to Hidden teams this way.
- Domain capture - Automatically adds users who sign up with a verified company domain.
- Team discovery - Shows Open teams to unassigned users in the Warp app under Settings > Teams.
Unassigned users
Section titled “Unassigned users”An unassigned user belongs to the workspace but not to a team. Workspace admins can manage unassigned users and set a separate per-user spend limit for them in the Admin Panel.
Unassigned users cannot start cloud agent or factory runs until they join a team. Workspace-level billing and policies still apply to them.
Workspace settings and team settings
Section titled “Workspace settings and team settings”Workspace admins configure company-wide policies in the Admin Panel. For supported settings, they can enforce a value across the workspace or select Respect Team Setting to let each team decide.
SSO and domain capture apply at the workspace level. When a workspace admin enforces a setting, team admins see it as locked.
Workspace spend limits
Section titled “Workspace spend limits”Workspace admins can set monthly limits for total, local agent, and cloud agent spending. They can also set a separate per-user limit for unassigned users. Team and individual limits remain independent, and the first applicable limit reached blocks further usage within its scope.
Related pages
Section titled “Related pages”- Team management - Create and manage teams
- Admin Panel - Configure settings enforced across a workspace or team
- Roles and permissions - Team-level roles and what each can do
- Single Sign-On (SSO) - Configure authentication for a workspace
- Enterprise billing - Credit pools, spend limits, and billing management