Workspaces

Cross-tenant collaboration

Grant a person from another workspace scoped access to yours — safely and temporarily.

Sometimes you need someone from a different organization — a partner or a client — to work in your workspace without giving up tenant isolation. Cross-tenant grants make that possible and auditable.

How a grant works

1. An owner or admin creates a grant for the external person, choosing a role and scope.
2. The grant appears in their account as access to your workspace.
3. You can change the role or revoke the grant at any time.

Grants are recorded in the audit log, and the guest still only sees what their granted role allows.

Good practice

• Grant the narrowest role that works.
• Revoke grants when the engagement ends.
• Review active grants periodically.

Related

• Tenant isolation
• Roles & access

Last updated 2026-09-02