// HELP/Workspace/Understand workspaces

Understand workspaces

Learn what a workspace contains, how workspace membership works, and why item permissions still matter.

A workspace is the boundary around a team and its work

A workspace is the main container for a team’s work in ALLO. It holds:

  • people and teams
  • projects and canvases
  • Goals/OKRs
  • files
  • billing
  • workspace settings

Most teams use one workspace for a company, department, class, client group, or long-running program. If you belong to more than one workspace, the active workspace decides which people, files, projects, canvases, Goals/OKRs, and billing settings you are looking at.

Many support questions that feel like missing data are actually workspace questions:

  • A canvas may not be gone. It may live in another workspace.
  • A teammate may not be missing from ALLO. They may be an external collaborator on one canvas instead of a workspace member.
  • A billing or invite button may not be broken. Your role may not include workspace admin permissions.

For the deeper role model, read Members, guests, and external collaborators. For the admin workflow, read Manage workspace members and Change a member role.

Availability and permissions

ItemDetails
Available onAll ALLO workspaces. Plan limits can affect seats, storage, AI features, or some admin controls.
Available forWeb app, desktop app, and mobile app.
Who can view workspace contentWorkspace members can view workspace areas allowed by their role and item permissions. External collaborators and guests can view only the shared work they were given access to.
Who can manage workspace settingsWorkspace admins, or members with workspace-level management permission.
Who can manage item accessOwners, managers, editors, or admins depending on the item and sharing surface. Item access is separate from workspace membership.

Where to find workspace areas

Use Switch workspaces first when something looks wrong. If you are in the wrong workspace, every other search and filter will feel misleading.

AreaWhere to find itWhat it is for
HomeWorkspace switcher → HomeRecent work, Today, activity previews, Inbox previews, and quick ways back into the workspace.
PeopleHome → PeopleWorkspace members, teams, and the org chart. People is a directory, not the full sharing permission list for every canvas.
Projects and canvasesHome, Projects, All canvases, or direct linksDay-to-day work, planning, workshops, files, and reviews. Start with Understand projects and Understand canvas.
Goals/OKRsWorkspace navigation → Goals/OKRsObjectives, Key Results, Initiatives, Check-ins, Sessions, and Snapshots. See Understand Goals/OKRs.
FilesWorkspace navigation → FilesUploaded files connected to workspace work. See Files overview.
InboxHeader or Home preview → InboxMentions, access requests, invitations, reminders, OKR updates, and other updates needing attention. See Use Inbox.
Settings and BillingWorkspace settings → General, Members, Admin/Security, or BillingWorkspace name, members, roles, plan, seats, payment method, AI credits, storage add-ons, security policies, and danger-zone actions. Start with Open workspace settings.

What belongs to a workspace

A workspace owns the main operating context. Members, teams, projects, canvases, Goals/OKRs, files, and billing all belong to a workspace. Search, recent work, activity, permissions, and notifications are also scoped by workspace so ALLO can protect private work across teams and clients.

The important distinction is that workspace membership is not the same as permission on a specific item:

  • Joining the workspace can make you a member of the team, but a private canvas can still be view-only or unavailable to you.
  • A client can be invited to one canvas without becoming a workspace member.
  • A deactivated member can have an old direct link and still be blocked because the workspace boundary comes first.

Use this quick model when deciding what to change:

You need to changeStart hereWhy
Someone should belong to the team long termInvite workspace membersWorkspace members appear in member search, People, teams, and member management.
Someone should only review one canvas or projectShare work with teammates or Share a canvasItem sharing gives focused access without adding a person to the whole workspace.
A client should open one canvas without team membershipInvite guests and external collaboratorsGuest and external collaborator access is intentionally narrower than membership.
A member needs admin controlsChange a member roleAdmin controls affect workspace settings, member management, and billing-sensitive areas.
A former teammate should no longer enter the workspaceAccess a deactivated workspaceDeactivation blocks the workspace relationship before item links can be used.

Workspace members, external collaborators, and guests

RelationshipWhat it meansWhere it matters
Workspace memberA person who belongs to the workspace.Can appear in People, be added to teams, show in member search, and receive workspace-scoped notifications.
Workspace adminA workspace member with admin responsibility.Can manage settings, members, billing, and sensitive workspace controls where the workspace exposes them.
External collaboratorA person who is not a full workspace member but has access to specific shared work, such as one canvas or project.Usually does not appear in People or teams because they are not part of the workspace directory.
GuestA person who enters through a guest or shared-link flow.Useful for quick reviews, workshops, client feedback, or short-lived collaboration. Their view, comment, or edit access depends on the shared item permission.
Deactivated memberA person whose workspace membership has been blocked.Old project or canvas links should not reopen the workspace. See Access a deactivated workspace for recovery.

Content-level access still matters

ALLO has two layers of access: the person’s relationship to the workspace and the person’s permission on the specific work.

LayerQuestion it answers
Workspace relationshipIs this person part of the workspace, an admin, an external collaborator, a guest, or deactivated?
Item permissionCan this person view, comment, edit, or own this canvas, project, dashboard, Goal/OKR item, task, or file?

This is why a workspace admin may still need to check a canvas sharing dialog, and why making someone a workspace member is not always the right fix. If the problem is one canvas, fix the canvas permission. If the problem is team membership, fix the workspace membership. If the problem is admin controls, fix the workspace role.

Workspace settings, security, and deletion

Workspace settings are where admins handle the workspace itself: member management, roles, billing-sensitive areas, security policies, and dangerous actions such as leaving or deleting the workspace.

NeedStart here
Restrict member email domains, require two-factor authentication, block file extensions, restrict integration apps, or review workspace access logsWorkspace security settings
Leave the workspace or remove the workspace permanentlyLeave or delete a workspace

These actions are intentionally separate from normal project or canvas editing. Editing a canvas does not mean you can change a workspace's member list. Owning a project does not mean you can delete the workspace. A hidden settings control usually points to role, plan, workspace type, or policy, not a missing page.

Examples

SituationBest starting point
A new employee should work across the team.Invite them as a workspace member. After they accept, they can appear in People and be added to teams. If they still cannot edit one canvas, check the canvas permission instead of sending another workspace invite.
A client only needs to review one design canvas.Share that canvas with view or comment access. Do not add them as a workspace member unless they should appear in your directory and work across the workspace.
A former teammate says an old canvas link no longer opens.Ask a workspace admin to check whether their member access was deactivated. If they should now be only an external collaborator, the admin may need to resolve the old member state and share the specific work again.
A manager cannot see Billing, member invites, or role controls.Check whether they are a workspace admin. A person can lead a project without being a workspace admin.

Common mistakes

  • Inviting someone to the workspace when they only need one shared canvas. That can increase seat usage, expose the person in People, and make later permission cleanup harder.
  • Copying a direct link and assuming the link grants access. A link helps someone navigate to the work; it does not always grant permission.
  • Treating People as every collaborator list. People is the workspace directory. External collaborators and guests are usually managed from the shared work itself.
  • Assuming teams automatically fix every permission issue. Teams help organize members, but item-level sharing still decides who can open or edit a private canvas or project. See Manage teams for the difference.

Recover when work or people look missing

  1. Confirm the active workspace. Use Switch workspaces, then return to Home, People, Projects, All canvases, Files, or Goals/OKRs.
  2. Clear search and filters. A filtered People list, archived Session, private project, deleted canvas, or Shared with me state can look like missing data. Use When work looks missing for the broader checklist.
  3. If a person is missing from People, ask whether they are actually a workspace member. They may be a guest or external collaborator on one shared item. Check Members, guests, and external collaborators before sending another invite.
  4. If someone cannot open work, check their account email, workspace membership, item permission, and whether they are deactivated. If the item is linked from a notification, also check whether the original resource was deleted, moved, or unshared. When you cannot access work covers the wider access path.
  5. If an admin action is missing, ask a workspace admin to review your role. Do not create duplicate work just because a control is unavailable. Unavailable controls usually mean role, permission, plan, or item state, not a missing feature.
Give feedback

Was this article helpful?