> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.governanceaicore.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.governanceaicore.com/_mcp/server.

# Organization & Workspace Management

> Manage organizations, workspaces, users, and permissions in GovernanceAI

# Organization & Workspace Management

GovernanceAI uses a hierarchical structure for multi-tenant management.

## Hierarchy

```
Organization
├─ Workspace A
│  ├─ Users
│  ├─ Guardrails
│  └─ Policies
├─ Workspace B
└─ Workspace C
```

## Creating Workspaces

### Via Dashboard

* **Settings** → **Workspaces**
* **Create Workspace**
* Enter name (e.g., "Production", "Development")
* Choose isolation level
* Click **Create**

### Via API

```bash
curl -X POST https://api.governanceai.com/v1/workspaces \
  -H "Authorization: Bearer $API_KEY" \
  -d '{
    "name": "Production",
    "description": "Production environment guardrails",
    "isolation_level": "strict"
  }'
```

## Managing Users

### Invite Users

* **Settings** → **Team Members**
* **Invite Member**
* Select role
* Send invitation

### Roles & Permissions

| Role       | Permissions                           |
| ---------- | ------------------------------------- |
| **Admin**  | Full access, manage users             |
| **Editor** | Create/modify policies and guardrails |
| **Viewer** | Read-only access                      |
| **Custom** | Configure specific permissions        |

## SSO Setup

### SAML Configuration

* **Settings** → **Single Sign-On**
* Click **SAML**
* Enter Identity Provider URL
* Download SAML metadata
* Configure in your IdP
* Test connection

### OIDC Configuration

```bash
curl -X POST https://api.governanceai.com/v1/sso/oidc \
  -H "Authorization: Bearer $API_KEY" \
  -d '{
    "client_id": "your_client_id",
    "client_secret": "your_client_secret",
    "discovery_url": "https://idp.company.com/.well-known/openid-configuration",
    "redirect_uri": "https://app.governanceai.com/callback"
  }'
```

## Role-Based Access Control (RBAC)

### Create Custom Role

```bash
curl -X POST https://api.governanceai.com/v1/rbac/roles \
  -H "Authorization: Bearer $API_KEY" \
  -d '{
    "name": "Security Lead",
    "permissions": {
      "guardrails": ["create", "read", "update", "delete"],
      "policies": ["create", "read", "update"],
      "reports": ["read", "export"],
      "users": ["read"],
      "audit": ["read"]
    }
  }'
```

## Workspace Isolation

### Strict Mode

* Data completely isolated
* Separate policies per workspace
* No data sharing between workspaces

### Shared Mode

* Can reference shared guardrails
* Org-level policies apply to all
* Cost optimization

## Next Steps

* **[Setting Up Guardrails](/usage-guides/guardrails-setup)** - Create guardrails
* **[Creating Policies](/usage-guides/policies)** - Create policies
* **[API Reference](/api)** - User management APIs