Workspace

Team & workspace

Everything above the project level: who is in your organization and what they can do, the settings and secrets shared across all projects, where your builds run, billing, and your own account.

Members & roles

In the dashboardWorkspace → Members

Invite people by email and assign a role. Invitees get an email to join; once accepted they appear in the members list, where you can change their role or remove them at any time. Roles apply across every project in the workspace.

Role	Can do
Owner	Full control, including billing, deletion, and managing other admins
Admin	Manage projects, members, and settings — not billing or ownership
Member	Work on projects and deployments without org-level admin powers

Beyond these tiers, custom roles let you define finer-grained permission sets. Grant the least privilege that lets someone do their job — most contributors only need Member.

Shared variables

Team environment variables

In the dashboardWorkspace → Environment Variables

Org-wide variables are injected into every project in the workspace — good for a shared analytics key or internal API token you'd otherwise re-enter per project. They're encrypted at rest exactly like project variables, and a project-level variable with the same name takes precedence.

Audit log, repositories & domains

Audit log

In the dashboardWorkspace → Audit Log

An immutable record of who did what across the workspace — member changes, deployments, settings edits. Filter and export it as CSV for compliance or incident review.

Repositories

In the dashboardWorkspace → Repositories

Manage which GitHub repositories the workspace can access and deploy from — the connection between your Git account and the projects you create here.

Email forwarding & domain redirects

In the dashboardWorkspace → Settings

Forward mail sent to addresses on your connected domains to a real inbox, so you can route hello@ or support@ without running a mail server. Domain redirects send an entire domain — an old one, or a www apex — to your primary domain.

Billing & plans

In the dashboardWorkspace → Billing

Each plan includes monthly allowances for requests and function invocations. The billing page shows your current plan, usage against its limits, and invoices. Higher tiers raise those limits and unlock team-only features such as per-org KMS encryption keys and longer audit-log retention.

Demo mode

This deployment of Deploxa runs in demo mode — checkout is intentionally disabled, so plan changes can't actually be purchased. The billing UI is shown to demonstrate the flow.

Your account

In the dashboardAccount → Settings

Update your name and avatar. Your email address comes from the identity provider you signed in with — GitHub or Google — and changes there, not here. Notification preferences are per member, so everyone in an organization chooses which deployment and workspace events reach them by email.

Sessions

Every active sign-in across your devices is listed with its browser, approximate location, and last-seen time. Revoke any session you don't recognize — it takes effect immediately.

Revoking a session signs that device out but doesn't change anything at the identity provider. If you think your GitHub or Google account itself is compromised, rotate credentials there first, then revoke here.

Platform Features