Guides
Admin console and workspace policies
On the hosted service's Enterprise plan, a workspace's owners have an Admin console: open the workspace menu and select Admin console. It shows the workspace's policies, its single sign-on and SCIM status, and everyone with access. Self-hosted OpenRows doesn't offer the console.
Policies
Policies limit what people in the workspace can share and connect, on top of their roles. OpenRows enforces them on the server, so they hold for the app, the REST API and every integration alike. Each change is recorded in the workspace's audit log as "Changed workspace policies", with what was on before and after.
- Allow public share links of views and bases. Turned off, no one can create a share link, and existing links stop opening. They open again if you turn the policy back on, unless they were revoked in the meantime.
- Allow public forms. The same for form links: published forms stop accepting answers.
- Allow embedding share links on other sites. Turned off, links can't be given embed origins and no other site can frame a link.
- Allow personal access tokens. Turned off, tokens can't reach the workspace's data: the REST API, the SDK, MCP clients and n8n stop working with it, and new tokens can't be granted the workspace or its bases. People signed in to OpenRows aren't affected.
- Invitations only to these email domains. With domains listed, invitations to the workspace, its bases and its interfaces can only go to addresses on them. Invitations already sent to other addresses can't be accepted.
To require single sign-on, verify email domains or connect SCIM, use the workspace's Single sign-on page (Single sign-on, SCIM provisioning).
If the workspace leaves the Enterprise plan, its policies keep applying. Owners can still turn them off, but not add new ones.
People
The People list shows everyone with access: members with their workspace role, and collaborators on some bases or interfaces only, with the bases they're on. Last active is the last time someone used the workspace, to within ten minutes. People managed by your identity provider are marked SCIM.