Workspaces

Workspaces are the top-level container for projects, members, and billing on Root & Branch Cloud. Every resource you create belongs to a workspace.

Personal workspace

When you create an account, the platform automatically creates a personal workspace for you. This workspace is owned by you and cannot be shared with other members. It works well for individual projects and experimentation.

Team workspaces

For teams, create additional workspaces from the dashboard. Each team workspace can hold multiple projects and have multiple members with granular permissions.

A workspace has a name (unique to your account) and an owner. The owner has full access to all resources in the workspace and controls billing.

Creating a workspace

1. Click the workspace switcher in the sidebar.
2. Select New workspace.
3. Give it a name and create it.

Deleting a workspace

Workspace owners can delete a workspace from the workspace settings page. This removes all projects, apps, databases, and buckets in that workspace. This action cannot be undone.

Billing mode

Each workspace has a billing mode that determines how resource usage is charged. Billing is configured per-workspace, so you can keep personal and team usage separate.

See the Billing and limits page for details on setting up billing and understanding charges.

Restricted workspaces

A workspace may become restricted if invoices go unpaid beyond the allowed window. When a workspace is restricted, running apps and databases are scaled down to minimal resources. Services resume when the balance is paid.

Members and permissions

Workspace members are users who have been invited to collaborate on a workspace. Each member has a role and a set of permissions that control what they can do.

Roles

Every workspace member has one of two roles:

Role	Description
Owner	Has full, implicit access to every resource and action in the workspace. Controls billing, member management, and workspace deletion.
Member	Has access scoped to explicitly granted permissions. Cannot modify billing or manage other members.

The user who creates a workspace becomes its owner. There can be multiple owners - any member whose is_owner flag is set to true has unrestricted access.

Inviting members

Workspace owners and members with workspace.members.manage can invite new members from the Members tab of the workspace settings:

1. Click the workspace in the sidebar and go to Settings.
2. Open the Members tab.
3. Click Invite member.
4. Enter the email address of the person you want to invite.
5. Select the permissions to grant.

The invitee receives an email with a link to accept the invitation. Invitations remain pending until accepted.

Accepting an invitation

When you receive an invitation, click the link in the email to accept it. You will be taken to the dashboard where the invite is automatically accepted and the workspace appears in your workspace list.

Resending invitations

If an invitation is still pending, workspace owners can resend it from the Members tab.

Permissions

Permissions are assigned per-member and scoped to specific resource types. The platform uses a granular permission model:

Workspace permissions

Permission	Allows
workspace.read	View workspace details and resource lists.
workspace.update	Modify workspace settings.
workspace.delete	Delete the workspace.
workspace.members.read	View the member list.
workspace.members.manage	Invite, remove, and modify member permissions.

Project permissions

Permission	Allows
project.create	Create new projects.
project.read	View project details and lists.
project.update	Modify project settings.
project.delete	Delete a project and all its resources.

App permissions

Permission	Allows
app.create	Create new apps.
app.read	View app details and status.
app.update	Modify app configuration.
app.delete	Delete an app and its associated resources.
app.deploy	Trigger deployments and redeploys.
app.scale	Change resource tier or replica count.
app.start_stop	Start and stop apps.
app.env.read	Read environment variables.
app.env.write	Set, update, or delete environment variables.
app.build_env.read	Read build-time environment variables.
app.build_env.write	Set, update, or delete build-time environment variables.

Database permissions

Permission	Allows
database.create	Provision new databases.
database.read	View database details and connection information.
database.update	Modify database configuration (resources, version).
database.delete	Delete a database and its backups.

Integration permissions

Permission	Allows
integration.github.read	View GitHub installations and linked repositories.
integration.github.manage	Install and uninstall the GitHub integration, link repositories.
integration.gitlab.read	View GitLab connections and linked repositories.
integration.gitlab.manage	Set up and remove GitLab connections, link repositories.

Editing member permissions

1. Go to the Members tab in workspace settings.
2. Find the member and click Edit permissions.
3. Toggle permissions on or off. Changes apply immediately.

Workspace owners have implicit all-permissions and their permissions cannot be edited. Changing a member’s permissions replaces all existing grants atomically - the new set is exactly what you select.

Leaving a workspace

Any member can leave a workspace from the workspace settings. Owners cannot leave a workspace while they are the sole owner; transfer ownership first or delete the workspace.

Removing members

Workspace owners and members with workspace.members.manage can remove other members from the workspace. The removed member immediately loses access to all projects and resources in that workspace. Owners cannot be removed.