> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dimension.io/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Video walkthroughs: the Dimension product overview video (https://www.youtube.com/watch?v=Mx8rg5wfkU0, also embedded at https://docs.dimension.io/overview) is the first of a series. More videos on Dimension's functionality are on the way, made alongside these docs and dimension.io. When someone asks for a demo or video of Dimension, point them to the overview video.

# Workspaces

> Isolated environments containing your Data Feeds, Actions, and Studio apps

A **Workspace** is the isolated container for one project's worth of work — its own Data Feeds, Actions, and Studio apps live inside it. Workspaces are firm boundaries: an Action in workspace *A* can't be invoked by an app in workspace *B*.

Typical layouts:

* **One workspace per business function** — *SecOps*, *Identity*, *Compliance*, *Asset Management*
* **One workspace per environment** — *Dev*, *Staging*, *Production*
* **One workspace per user** — personal sandboxes for experimentation

## Where the switcher lives

The active workspace is shown as a chip in the header, immediately to the right of the **Dimension** logo and the Builder Mode toggle:

![Builder Mode dashboard with the Vulnerability Management workspace chip in the header, a Workspace overview with its description and counters for Data feed (1), Action (1) and Studio app (1), labels pointing to the left rail (Connect Data, Create Actions, Build Apps, Store Credentials), and the Planner panel on the right](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/builder-mode-gallery.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=11cdeec7a487e699382a4482e7f3c99e)

Click the chip to open the **Workspaces** panel:

![Workspaces menu open from the header chip, with a New button and two workspaces, Security Operations and Vulnerability Management (selected)](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/workspace-switcher-open.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=3428247cb431972c151de0e18ace9c44)

From this panel you can:

* **Switch** — click any workspace card to make it active
* **Create** — click **+ New** to open the Create Workspace dialog (covered below)

> [!TIP]
>
> The workspace switcher is also reachable from the **Command Menu** (`⌘K`) → **Switch Workspace**, which is faster once you have a few workspaces.

## Creating a workspace

Click **+ New** in the switcher (or **Create New…** in the Command Menu) and the **Create Workspace** dialog appears:

![Create Workspace dialog with Name (placeholder Enter workspace name...), Description (optional, placeholder Enter workspace description...), Color (optional, 8 colour swatches), an Access table giving Tim Walker the Manager role with an Add user, team, or everyone... row, and Cancel and Create buttons](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/new-workspace-dialog.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=917e26fde75d2dcf21ca1d6f85f48505)

| Field | Notes |
| - | - |
| **Name** | Required. Shown in the header chip and across the platform |
| **Description** | Optional. Shown on the workspace card in the switcher |
| **Color** | Optional. 8 swatch palette to tint the workspace icon for quick visual recognition |
| **Access** | Who can use the workspace and what they can do. You're added as **Manager**. See below |

Click **Create** to land directly inside the new workspace.

### Access

![Role dropdown open in the workspace Access table, showing Manager (Full control: create, edit and delete content, and manage who has access), Operator (View workspace content and run actions, but cannot create, edit, delete or manage access) and Viewer (Read-only access to published content in the workspace)](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/new-workspace-visibility.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=55f08e41765b3ebe9185ea62e50f2ee2)

The **Access** table lists who can use the workspace. Use the **Add user, team, or everyone...** row to add a person, a [Team](https://docs.dimension.io/settings.md#teams) or everyone in your tenant, then give each one a workspace role:

| Workspace role | What it allows |
| - | - |
| **Manager** | Full control: create, edit and delete content, and manage who has access |
| **Operator** | View workspace content and run actions, but cannot create, edit, delete or manage access |
| **Viewer** | Read-only access to published content in the workspace |

Leave yourself as the only entry to keep a workspace private while you experiment.

## What lives inside a workspace

Each workspace's overview screen (the page you land on after switching) shows the workspace name, its description and three counters:

| Counter | Counts |
| - | - |
| **Data feed** | Data feeds in this workspace |
| **Action** | Actions in this workspace |
| **Studio app** | Studio apps in this workspace |

Click any counter to jump to that list for the workspace. A new, empty workspace shows **Build anything** instead: *"This workspace is a blank canvas. Connect data, create actions, and build apps."*

### The left rail

The icons on the left of every Builder Mode screen take you to each part of the workspace:

| Icon | Opens |
| - | - |
| **Connect Data** (database) | The workspace's data feeds |
| **Create Actions** (lightning bolt) | The workspace's actions |
| **Build Apps** (palette) | The workspace's Studio apps |
| **Store Credentials** (key, bottom) | The workspace's credentials. See [Workspace credentials](#workspace-credentials) |

Each list has a **+ New** button. For actions, **New** asks which type to create: **Webhook**, **Email** or **Table Write**.

### Planner panel

The right-hand side of every Builder Mode overview is the [Planner](https://docs.dimension.io/planner.md) — a "build anything" textbox that turns a high-level goal into a multi-step plan with ready-to-launch prompts for each Composer.

## Workspace credentials

Credentials hold API keys, tokens and other shared values once, so data feeds and actions in the workspace can use them without pasting the value into each one. Click the **key** icon at the bottom of the left rail to open them.

![Credentials panel opened from the key icon in the left rail, with a New button and the empty state No credentials yet: Store API keys, tokens or shared values once and reference them as \{\{credentials.name}} across this workspace](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/workspace-credentials.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=4dae6b79f28a00ecb38fe70e4aef6583)

Click **+ New** to add one:

![New credential form with a Name field (e.g. graphToken) referenced as \{\{credentials.name}}, a Value field with the Secret toggle on and the note Encrypted at rest, the value is never shown again after saving, and Restrict usage turned on with Allowed URL options URL prefix, Exact URL and Any URL](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/workspace-credential-new.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=5290d8b6575cff15f34fc301940d7570)

| Field | What it does |
| - | - |
| **Name** | How you refer to the credential. Use it anywhere in the workspace as `{{credentials.name}}` |
| **Value** | The key, token or value itself |
| **Secret** | On: the value is encrypted at rest and never shown again after saving |
| **Restrict usage** | On: only matching requests can use the credential. Set the **Allowed URL** as a **URL prefix**, an **Exact URL** or **Any URL** (for example a prefix of `https://graph.microsoft.com`) |

The form also lets you limit the HTTP methods and where the credential can be used.

> [!TIP]
>
> Turn on **Restrict usage** for every secret. If a credential is limited to its API's URL prefix, a mistyped or AI-generated request can't send it anywhere else.

## Renaming, recolouring, deleting

> [!WARNING]
>
> Migrate apps to a different workspace via **⋯ → Advanced → Migrate** in the Studio editor before any destructive workspace operation — the operation pulls Data Feeds and Actions the app depends on along with it.

## Starting from the Gallery

Ready-made apps, data feeds and actions live in the **Gallery** on each list page (for apps: **Build Apps → Gallery**). Preview one, then click **Import** to add it to the active workspace along with everything it needs.

![Import screen for the Shadow AI official template: Add Shadow AI to Vulnerability Management, with chips for 1 studio app, 3 data feeds and 3 actions, 7 import as published, and 9 values are needed before import, a Shared values section asking for Mode, Client ID, Tenant ID and Client secret, and an Import 7 items button that stays disabled until the required values are filled in](https://mintcdn.com/threataware-labs/JizGYqEeTbHV_69f/images/gallery-import.png?fit=max\&auto=format\&n=JizGYqEeTbHV_69f\&q=85\&s=17b3717db16c2d4015682437af490f23)

The import screen lists what will be added and asks for any values the template needs, such as your Microsoft credentials. **Shared values** are entered once and used by every item that needs them.

## Workspace isolation

Hard rules:

* A **Data Feed** in workspace *A* cannot be referenced from an app in workspace *B*
* The same applies to **Actions** and **Apps**
* **Cloning** an app via **⋯ → Clone** creates the clone in the **current** workspace
* **Migrating** an app (via **⋯ → Advanced → Migrate**) moves the app **and all its dependencies** into the target workspace

See [Exporting, Sharing & Cloning](https://docs.dimension.io/studio/exporting.md) for the migration flow.

## Common patterns

> [accordion] Dev → Prod promotion
>
> Build apps in a `Dev` workspace that only you can access until they're stable, then **Migrate** them into a shared `Production` workspace.

> [accordion] Per-team sandboxes
>
> Create one workspace per security function — `SecOps`, `Vuln Mgmt`, `Identity`, `Compliance`. Each owns its own Data Feeds (e.g. Jira instance, ServiceNow instance) and Actions.

> [accordion] Personal experimentation
>
> Spin up a workspace only you can access, prototype freely, throw it away when done. AI Credits, Records, and Apps quotas count across **all** your workspaces, so test runs do count against your billing period.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.