> ## Documentation Index
> Fetch the complete documentation index at: https://docs.linquid.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspace Settings and Governance Reference

> General settings, members, domains, keys, limits, notifications, and governance routines

# Workspace Settings and Governance Reference

Workspace settings control security, collaboration, and operational stability.

## Workspace tab map (what each tab controls)

| Tab                   | Primary purpose                   | Typical actions                                                     |
| --------------------- | --------------------------------- | ------------------------------------------------------------------- |
| General               | Workspace identity and lifecycle  | Rename workspace, update logo, transfer ownership, delete workspace |
| Members               | Team access control               | Invite users, set role, remove member                               |
| Billing               | Plan and credits                  | Upgrade/downgrade, buy credits, configure auto top-up               |
| Domains               | Branded routing and email domains | Add/verify/remove domains, configure not-found/expired behavior     |
| Webhooks              | Workspace webhook subscriptions   | Create subscriptions, enable/disable, test, inspect deliveries      |
| Tracking              | Publishable key lifecycle         | Create client-safe keys, toggle enabled, rotate/delete              |
| Stripe                | Revenue merchant connection       | Connect/disconnect Stripe merchant account                          |
| Emails                | Delivery history                  | Inspect outbound email status and failures                          |
| API Keys              | Server automation credentials     | Create/revoke scoped keys                                           |
| API Apps              | OAuth client credentials          | Create app, set redirect URIs, rotate secret                        |
| Embeds                | Public/shareable widgets          | Generate embed code for stats/referrals/link creation               |
| Security (Enterprise) | SAML + SCIM                       | Configure SSO and provisioning policies                             |

Feature availability is plan-gated for several tabs.

For a dedicated tab-by-tab gate matrix, see:

* `/user-guides/manual/workspace/workspace-tabs-and-plan-gates-reference`

## Workspace setup flow (recommended order)

1. Configure General tab first (identity, defaults, ownership safety).
2. Configure Members and invitations with least-privilege roles.
3. Configure Billing and credit guardrails.
4. Configure plan-gated modules (domains, webhooks, tracking, keys).
5. Configure enterprise identity controls if applicable.
6. Run end-to-end smoke checks after setup.

This order reduces rework and prevents hidden plan-gate surprises later.

## General workspace settings

Typical controls:

* workspace identity (name/logo)
* default reporting currency
* ownership continuity actions (transfer ownership before critical changes)
* workspace deletion safeguards

## Team and role governance

Govern access by:

* role assignment at invite time
* invite acceptance flow and stale invite cleanup
* member lifecycle cleanup (remove dormant accounts)
* owner/admin periodic review

## Billing and credit governance

Operational controls include:

* plan review and plan change actions
* credit balance and cycle usage visibility
* auto top-up enable/disable
* auto top-up threshold and recharge amount
* billing history and payment outcome tracking

Recommended guardrails:

* keep auto top-up enabled for production workspaces
* set threshold high enough to avoid traffic interruption risk
* review billable-event mix monthly (clicks, conversions, fraud checks)

## API and publishable keys

Key management responsibilities:

* scoped key creation
* key rotation and revocation
* environment separation (test vs production)
* usage review and stale-key cleanup

Publishable key controls should be limited to browser-safe tracking use cases only.

## Custom domain operations

Domain operations include:

* adding and validating domains
* certificate and DNS readiness checks
* removal and cleanup operations

Advanced domain behavior:

* per-domain not-found redirect target
* per-domain expired-link redirect target
* optional mobile association files (AASA / Android asset links)
* optional custom email-domain setup and verification (plan dependent)

## Limits and retention governance

Use limits dashboards and plan references to manage:

* resource ceilings
* retention windows
* upgrade/downgrade readiness

## Webhook and integration operations

Workspace-level operations include:

* selecting event triggers
* toggling webhook enable/disable state
* test delivery execution
* delivery history review for troubleshooting

For external provider integrations, manage status transitions (active, paused, disconnected, error) and rotate receiver credentials routinely.

## Notification preferences and operational comms

Configure notifications for:

* billing and subscription alerts
* workspace invites and membership activity
* affiliate and payout events
* messages and operational updates

Common notification categories include:

* billing alerts
* workspace invite updates
* new partner application alerts
* commission and payout updates
* partner message notifications

## Email history and deliverability ops

Use email history views to:

* inspect sent/failed/pending email outcomes
* confirm workspace notifications are actually delivering
* troubleshoot invite and verification email failures
* review email logs during incident triage

## Enterprise identity operations (SAML/SCIM)

SAML controls:

* choose provider template or manual metadata
* set allowed email domains
* define default role for first-time SSO users
* enable SSO and optionally enforce SSO-only login

SCIM controls:

* provision directory URL/token
* sync users and groups
* auto-create and auto-deactivate users
* set default role for provisioned users

## Feedback and request channels

Workspace users can submit:

* bug reports
* feature requests
* general feedback

## Governance cadence

Recommended cadence:

* weekly: usage/limit health check
* monthly: access and key audit
* monthly: billing and retention review
* quarterly: domain and integration security review
* quarterly: SSO/SCIM policy review (if enterprise)

## Change-management checklist

Use this for any major workspace change (plan change, ownership transfer, integration rollout):

1. capture current baseline (members, keys, integrations, plan, limits)
2. execute one controlled change at a time
3. run smoke flow across links, conversions, and analytics
4. verify notifications and logs for unexpected regressions
5. document final state and owner of follow-up actions

Related:

* `/user-guides/manual/monetization/plans-pricing-and-limits-reference`
* `/user-guides/manual/workspace/security-and-compliance`
* `/user-guides/manual/workspace/workspace-tabs-and-plan-gates-reference`
* `/user-guides/manual/workspace/embeds-and-public-stats-reference`
* `/user-guides/manual/workspace/workspace-onboarding-and-governance-playbook`