Workspace and team

Find the right settings

Open Workspace Settings from the workspace or profile controls. Search the settings when you know what you want to change but not which section contains it.

General controls the workspace name, image or icon, industry, workspace URL, and eligible custom domains. Personalization controls shared navigation, launch page, browser-tab identity, page backgrounds, time zone, regular hours, and other presentation options.

Data Model contains the object directory and visualizer. Plans, Billing, and Credits cover capacity and spending. Users contains the people directory, Permission Roles, and Departments. Access to each action depends on your current role and permissions.

Invite and manage teammates

Approved email domains can restrict which email domains are eligible to join. This is a workspace sign-up restriction, not a replacement for invitations, access review, or individual role assignments.

Removing someone from the workspace removes their membership there. It is different from deleting the person’s entire Matte account. Changes to workspace access also affect the actions their credentials and agent requests can perform.

1. Open Users and choose Invite users. Enter the person’s email and assign the appropriate initial role and department.
2. Review pending invitations and the status shown in the directory. An invitation is not an active membership until it has been accepted and setup is complete.
3. If someone requests access to your workspace, review the Join requests area and approve or decline the request when you have that permission.
4. Use the directory search and role or department filters to find people. Review their access and status, and export the member directory as CSV when needed.

Understand roles and seats

A seat type is a separate limit on billable access. Viewer, Counter, Operator, and Admin seats have different capability ceilings. A role or individual override cannot grant an action beyond the user’s seat ceiling.

Counter access is designed for participating in counts and related allowed work. Full-user seats cover broader operational or administrative access. Review current seat charges in Billing before changing a member’s seat type.

• Owner. Has the highest workspace authority, including protected ownership and security responsibilities. Owner access cannot be treated like an ordinary custom role.
• Admin. The built-in role for managing the workspace, people, and everyday operations, subject to protected owner-only actions.
• Member. The built-in role for ordinary operational work. Administrators can inspect the actual permissions rather than assuming every member can do every action.
• Viewer. The built-in role intended for people who need visibility without normal edit rights.

Set access at the right level

Permission Roles lets authorized administrators inspect built-in roles and create or maintain custom roles when the plan includes them. Permissions cover specific work such as importing, exporting, changing schema, managing people, adjusting stock, receiving orders, or administering chat.

Individual permissions provide exceptions for a particular person. Object permissions control who can view, create, edit, or delete that object’s records and who can manage its fields or delete the object. Field visibility adds another layer for sensitive values.

Review these layers together when an action is missing: installed app, plan entitlement, seat type, workspace permissions, object access, field restrictions, and the record’s workflow state. Granting one permission does not bypass the others.

Organize people into departments

Departments describe the teams or functions in your workspace. Create departments, give them names, icons, and descriptions, and assign people so the directory reflects how your organization works.

A department is an organizational label. Use permission roles and object access to control capabilities. You can put people in the same department while giving them different responsibilities and levels of access.

Make the workspace recognizable

Sign-in & branding lets authorized users customize the workspace sign-in heading, description, accent, support link, logo, and background. It also shows the workspace sign-in links to share with teammates.

Custom domains require the relevant plan feature, permission, and DNS configuration. Follow the domain instructions shown in General and verify the connection status. Changing a workspace name is separate from changing its URL.

Workspace Personalization can set a launch page, reorder sidebar entries, choose pinned pages, set a short browser-tab name, and use different images for light and dark appearance where supported. These changes help the whole team recognize the correct workspace.

Switch, leave, or remove a workspace

Your personal General settings list your workspaces and provide switching, leaving, and new-workspace controls. Use separate workspaces when the people and data should be separate.

Deleting a workspace is a shared-data operation in Workspace Settings → Account. Its confirmation explains the records and configuration that will be removed. Ownership checks can prevent leaving or deleting an account until another owner is in place for a shared workspace.

Related guides