# Manage environment access
WHO CAN USE THIS FEATURE?
This guide is applicable to accounts with the Environments feature enabled. Environments is available for direct and Embedded users. Learn more about Environments for Embedded customers.
To perform the tasks in this guide, you'll need one of the following in your main workspace (DEV):
- The Environment admin role or legacy Admin system role
- Admin privileges
You can manage collaborator access to environments using role-based access control. Roles provide maintainable and consistent access control by allowing you to configure permissions for multiple collaborators at once.
This guide covers the following topics:
# Manage roles across environments
In the new permissions model, you manage collaborator access using environment roles and project roles. Roles are assigned per environment, so you can define different levels of access based on responsibilities in DEV, TEST, and PROD environments.
For example:
- In the main environment (DEV), a member of the center of excellence team may need Environment admin privileges in order to access workspace management features such as SAML authentication. However, a regular recipe builder may simply need Member privileges to access the platform.
- In the TEST environment, the collaborator only needs to test and run their recipe. This can be done with the Advanced builder project role.
- In the PROD environment, the collaborator only needs to run their recipe. This can be done with the Builder project role.
Here's how this example would look in Workato:
If a role needs to be updated or deleted, you'll do so in the main environment (DEV). The Workspace admin page is only available in this environment.
# Grant environment access
Assigning a role for an environment to a collaborator also grants them access to the environment.
To grant access to an environment for a collaborator:
Go to Workspace admin > Access control > Collaborators (opens new window) in the (DEV) environment of your Workato account.
Click on the collaborator you want to modify. This will open the Edit collaborator page.
Locate the environment you want to grant access to. For example: TEST
In the Role menu below the environment, select the collaborator's role for that environment. To prevent or remove access to the environment, select No access.
Click Update.
# Revoke environment access
To revoke access to an environment for a collaborator:
Go to Workspace admin > Access control > Collaborators (opens new window) in the (DEV) environment of your Workato account.
Click on the collaborator you want to modify. This will open the Edit collaborator page.
Locate the environment you want to revoke access from. For example: TEST
In the Role menu below the environment, select No access.
Click Update.
# Resources
Last updated: 10/7/2025, 3:50:03 PM