
Understand workspaces
Learn what a workspace contains, how workspace membership works, and why item permissions still matter.
A workspace is the boundary around a team and its work
A workspace is the main container for a team’s work in ALLO. It holds:
- people and teams
- projects and canvases
- Goals/OKRs
- files
- billing
- workspace settings
Most teams use one workspace for a company, department, class, client group, or long-running program. If you belong to more than one workspace, the active workspace decides which people, files, projects, canvases, Goals/OKRs, and billing settings you are looking at.
Many support questions that feel like missing data are actually workspace questions:
- A canvas may not be gone. It may live in another workspace.
- A teammate may not be missing from ALLO. They may be an external collaborator on one canvas instead of a workspace member.
- A billing or invite button may not be broken. Your role may not include workspace admin permissions.
For the deeper role model, read Members, guests, and external collaborators. For the admin workflow, read Manage workspace members and Change a member role.
Availability and permissions
| Item | Details |
|---|---|
| Available on | All ALLO workspaces. Plan limits can affect seats, storage, AI features, or some admin controls. |
| Available for | Web app, desktop app, and mobile app. |
| Who can view workspace content | Workspace members can view workspace areas allowed by their role and item permissions. External collaborators and guests can view only the shared work they were given access to. |
| Who can manage workspace settings | Workspace admins, or members with workspace-level management permission. |
| Who can manage item access | Owners, managers, editors, or admins depending on the item and sharing surface. Item access is separate from workspace membership. |
Where to find workspace areas
Use Switch workspaces first when something looks wrong. If you are in the wrong workspace, every other search and filter will feel misleading.
| Area | Where to find it | What it is for |
|---|---|---|
| Home | Workspace switcher → Home | Recent work, Today, activity previews, Inbox previews, and quick ways back into the workspace. |
| People | Home → People | Workspace members, teams, and the org chart. People is a directory, not the full sharing permission list for every canvas. |
| Projects and canvases | Home, Projects, All canvases, or direct links | Day-to-day work, planning, workshops, files, and reviews. Start with Understand projects and Understand canvas. |
| Goals/OKRs | Workspace navigation → Goals/OKRs | Objectives, Key Results, Initiatives, Check-ins, Sessions, and Snapshots. See Understand Goals/OKRs. |
| Files | Workspace navigation → Files | Uploaded files connected to workspace work. See Files overview. |
| Inbox | Header or Home preview → Inbox | Mentions, access requests, invitations, reminders, OKR updates, and other updates needing attention. See Use Inbox. |
| Settings and Billing | Workspace settings → General, Members, Admin/Security, or Billing | Workspace name, members, roles, plan, seats, payment method, AI credits, storage add-ons, security policies, and danger-zone actions. Start with Open workspace settings. |
What belongs to a workspace
A workspace owns the main operating context. Members, teams, projects, canvases, Goals/OKRs, files, and billing all belong to a workspace. Search, recent work, activity, permissions, and notifications are also scoped by workspace so ALLO can protect private work across teams and clients.
The important distinction is that workspace membership is not the same as permission on a specific item:
- Joining the workspace can make you a member of the team, but a private canvas can still be view-only or unavailable to you.
- A client can be invited to one canvas without becoming a workspace member.
- A deactivated member can have an old direct link and still be blocked because the workspace boundary comes first.
Use this quick model when deciding what to change:
| You need to change | Start here | Why |
|---|---|---|
| Someone should belong to the team long term | Invite workspace members | Workspace members appear in member search, People, teams, and member management. |
| Someone should only review one canvas or project | Share work with teammates or Share a canvas | Item sharing gives focused access without adding a person to the whole workspace. |
| A client should open one canvas without team membership | Invite guests and external collaborators | Guest and external collaborator access is intentionally narrower than membership. |
| A member needs admin controls | Change a member role | Admin controls affect workspace settings, member management, and billing-sensitive areas. |
| A former teammate should no longer enter the workspace | Access a deactivated workspace | Deactivation blocks the workspace relationship before item links can be used. |
Workspace members, external collaborators, and guests
| Relationship | What it means | Where it matters |
|---|---|---|
| Workspace member | A person who belongs to the workspace. | Can appear in People, be added to teams, show in member search, and receive workspace-scoped notifications. |
| Workspace admin | A workspace member with admin responsibility. | Can manage settings, members, billing, and sensitive workspace controls where the workspace exposes them. |
| External collaborator | A person who is not a full workspace member but has access to specific shared work, such as one canvas or project. | Usually does not appear in People or teams because they are not part of the workspace directory. |
| Guest | A person who enters through a guest or shared-link flow. | Useful for quick reviews, workshops, client feedback, or short-lived collaboration. Their view, comment, or edit access depends on the shared item permission. |
| Deactivated member | A person whose workspace membership has been blocked. | Old project or canvas links should not reopen the workspace. See Access a deactivated workspace for recovery. |
Content-level access still matters
ALLO has two layers of access: the person’s relationship to the workspace and the person’s permission on the specific work.
| Layer | Question it answers |
|---|---|
| Workspace relationship | Is this person part of the workspace, an admin, an external collaborator, a guest, or deactivated? |
| Item permission | Can this person view, comment, edit, or own this canvas, project, dashboard, Goal/OKR item, task, or file? |
This is why a workspace admin may still need to check a canvas sharing dialog, and why making someone a workspace member is not always the right fix. If the problem is one canvas, fix the canvas permission. If the problem is team membership, fix the workspace membership. If the problem is admin controls, fix the workspace role.
Workspace settings, security, and deletion
Workspace settings are where admins handle the workspace itself: member management, roles, billing-sensitive areas, security policies, and dangerous actions such as leaving or deleting the workspace.
| Need | Start here |
|---|---|
| Restrict member email domains, require two-factor authentication, block file extensions, restrict integration apps, or review workspace access logs | Workspace security settings |
| Leave the workspace or remove the workspace permanently | Leave or delete a workspace |
These actions are intentionally separate from normal project or canvas editing. Editing a canvas does not mean you can change a workspace's member list. Owning a project does not mean you can delete the workspace. A hidden settings control usually points to role, plan, workspace type, or policy, not a missing page.
Examples
| Situation | Best starting point |
|---|---|
| A new employee should work across the team. | Invite them as a workspace member. After they accept, they can appear in People and be added to teams. If they still cannot edit one canvas, check the canvas permission instead of sending another workspace invite. |
| A client only needs to review one design canvas. | Share that canvas with view or comment access. Do not add them as a workspace member unless they should appear in your directory and work across the workspace. |
| A former teammate says an old canvas link no longer opens. | Ask a workspace admin to check whether their member access was deactivated. If they should now be only an external collaborator, the admin may need to resolve the old member state and share the specific work again. |
| A manager cannot see Billing, member invites, or role controls. | Check whether they are a workspace admin. A person can lead a project without being a workspace admin. |
Common mistakes
- Inviting someone to the workspace when they only need one shared canvas. That can increase seat usage, expose the person in People, and make later permission cleanup harder.
- Copying a direct link and assuming the link grants access. A link helps someone navigate to the work; it does not always grant permission.
- Treating People as every collaborator list. People is the workspace directory. External collaborators and guests are usually managed from the shared work itself.
- Assuming teams automatically fix every permission issue. Teams help organize members, but item-level sharing still decides who can open or edit a private canvas or project. See Manage teams for the difference.
Recover when work or people look missing
- Confirm the active workspace. Use Switch workspaces, then return to Home, People, Projects, All canvases, Files, or Goals/OKRs.
- Clear search and filters. A filtered People list, archived Session, private project, deleted canvas, or Shared with me state can look like missing data. Use When work looks missing for the broader checklist.
- If a person is missing from People, ask whether they are actually a workspace member. They may be a guest or external collaborator on one shared item. Check Members, guests, and external collaborators before sending another invite.
- If someone cannot open work, check their account email, workspace membership, item permission, and whether they are deactivated. If the item is linked from a notification, also check whether the original resource was deleted, moved, or unshared. When you cannot access work covers the wider access path.
- If an admin action is missing, ask a workspace admin to review your role. Do not create duplicate work just because a control is unavailable. Unavailable controls usually mean role, permission, plan, or item state, not a missing feature.
Related articles
- Understand projects
- Find people, teams, and the org chart
- Switch workspaces
- Members, guests, and external collaborators
- Open workspace settings
- Invite workspace members
- Manage workspace members
- Workspace security settings
- Leave or delete a workspace
- When work looks missing