Managed customer workspace lifecycle
Create
Create a managed workspace with the customer's legal or commonly recognized
company name and verified domain. Record an internal reference only when it
helps reconcile the customer with your PSA or billing system.
Before inviting users, connect only the required apps and establish a baseline
group policy.
Operate
Review workspaces that need attention, have stale activity, or contain
unconfigured apps. Identity synchronization is optional; its absence is not by
itself a health failure.
Keep cloud permission packs and identity configuration inside the selected
customer's settings. Reconfirm the workspace before opening an external
authorization flow.
Offboard
- Stop new access changes.
- Export required Audit records.
- Revoke AI clients and personal authorizations.
- Remove or disable users and identity provisioning.
- Revoke shared provider credentials.
- Archive the workspace according to the customer agreement.
Archiving is preferable to deletion when operational or compliance records must
be retained.
Reactivate
Reactivation does not prove old credentials or policies are still appropriate.
Review users, groups, connections, AI clients, and provider scopes before
allowing new calls.