Multiple Workspaces
A Workspace is where you manage the IoT cellular connectivity for your devices. Every emnify customer has free access to a single Workspace.
When you need more than one Workspace to manage independent aspects of your business, you can use multiple Workspaces. This feature is designed to address the needs of organizations with complex business structures, particularly those with entities that should remain independent in functionality but may have users managing both aspects.
Unlike traditional sub-accounts, Workspaces are independent entities with their own configurations, user roles, and billing. Workspaces also offer more flexibility, as permissions are managed per Workspace, but you only need one login to access all of the Workspaces you're invited to.
Potential use cases for having multiple Workspaces include:
- Entities that require independent billing
- Diverse product lines within the same company with varying technical requirements
- Separating sandbox and live systems
- Entities that need independent contracts
By default, you can have up to three Workspaces with the Pro Package.
Useful terms
The following terms are commonly used when discussing Workspaces. Each listed term includes a link to its associated glossary entry:
Centralized features
The following table describes how popular emnify features are supported in the context of multiple Workspaces. In this table, Per Workspace means the feature is limited to a specific Workspace and unable to share instances or configurations across linked Workspaces.
| Feature | Centralized | Per Workspace |
|---|---|---|
| Cloud Connect | ||
| Billing | ||
| Reports | ||
| SIM inventory | ||
| Single sign-on (SSO) | ||
| User management | ||
| Virtual private networks (VPNs) |
Workspaces are new to emnify, so feedback and suggestions are very welcome. Please open a ticket on Canny.
Reports
Centralized reports extend the existing embedded reports feature on the Portal if you have access to multiple Workspaces. These reports allow you to view individual reports per Workspace or one centralized report that combines data from two or more Workspaces. Any user role can access reports and see reports from all accessible Workspaces regardless of which one they're currently in.
The following are examples of how data is combined in centralized reports:
- Network activity
If SIM A from Workspace 1 consumed 100 MB on March 1 and SIM B from Workspace 2 consumed 50 MB on the same day, the central report shows 150 MB consumed. - Usage by mobile network
If Workspace A consumed data only in Canada and Workspace B consumed data in the USA and Canada, the central report shows combined data for Canada for all networks and one more line in the report for USA consumption. - Data usage per device policy
If Workspace A and Workspace B have similar service policy names (for example, Normal Operations Group), you'll see two groups with the same name when you combine reports from both Workspaces.
Single sign-on
Users with the Administrator role can set single sign-on (SSO) for their default Workspace. Once SSO is enabled for the Workspace, subsequent users with this Workspace as their default must use SSO to log in to the emnify Portal. If SSO is enabled in a Workspace that isn't your default, you continue to use your email and password.
You can't log in directly to a Workspace that isn't your default.
For the available SSO providers and implementation guides, see Single sign-on.
User management
Multiple Workspaces allow you to partition access and visibility based on user roles. A user can have different roles in different Workspaces, even if they're linked. For example, someone can be a User in one Workspace and only see the IoT assets they need to manage but be an Administrator in another and able to manage other users in that particular Workspace. When emnify sets up your multiple Workspace architecture, a centralized SuperAdmin role is also provided.
For more information, see Roles and permissions.
SuperAdmin user role
The SuperAdmin role is provided when emnify sets up your multiple Workspace architecture. By default, this role is assigned to the longest-standing Administrator in the main organization.
The SuperAdmin automatically receives access to all existing and any new Workspaces linked to the main organization. In the Workspace switcher, they can see all of these Workspaces, plus any other Workspaces they have access to. This role can manage other users like administrators across multiple Workspaces in the Users tab of the Workspace settings in the emnify Portal.
There is only one SuperAdmin per main organization, and users with this role can't be removed from any Workspace linked to that organization, as they're the assumed owner. However, a user can be a SuperAdmin in one main organization but hold another role (for example, Observer) in an unrelated Workspace with a different main organization. In those Workspaces, this user can be updated or deleted as usual. For more information, see user management roles and permissions.
Reassigning the SuperAdmin role can only be done by the emnify team on request.
If you unlink your Workspaces, the SuperAdmin role is removed as it's no longer needed. By default, the former SuperAdmin becomes an administrator of any Workspace they already had access to before the Workspaces were linked and lose access to the others.
Unlinked Workspaces only affect the SuperAdmin's role and access. There are no visual differences or permission changes for other users.
Available guides
The following guides offer step-by-step guidance for configuring Workspaces:
- Create a new Workspace
- Link existing Workspaces
- Switch between Workspaces
- View centralized reports for multiple Workspaces
- Manage Workspace users
Many operations are also executable using the emnify REST API. Available endpoints are listed under the Workspaces tag in the OpenAPI specification.