Getting started as an enterprise admin

As a workspace owner or admin, you are responsible for setting up your enterprise workspace for your team. Learn the key tasks to get everything configured and ready.

---

​

1. Invite your team

Start by adding your team members to the workspace. You can invite people individually or upload a CSV to invite in bulk. Each person is assigned a role that controls what they can do. To invite members:

1. Click your workspace name at the bottom left.
2. Click Settings.
3. Click Members and groups.
4. Click Invite Members, then select Invite by email to add someone individually or Bulk invite (CSV) to upload a CSV.

For full details on roles and credit limits, see Managing enterprise workspace members.

---

​

2. Connect your workspace domain

Connect your organization’s domain to your workspace for a branded address and domain-based access control. Your domain also enables domain-based access rules with SSO, so people who sign in with your approved email domain can join your workspace automatically. If your organization uses more than one email domain, you can connect several domains to the same workspace. Learn how to connect your workspace domain.

---

​

3. Set up Single Sign-On

Enable SSO so your team signs in with their existing company credentials. Once enabled, anyone with your approved email domain is added to the workspace automatically when they first sign in, using the default role you set for SSO (Viewer by default). Learn how to set up SSO for your workspace.

---

​

4. Configure workspace policies

Control how apps, Superagents, connectors, and external access behave for everyone in the workspace.

• Require SSO for all workspace members: Require every workspace member to sign in through your SSO provider to access the workspace
• Enforce SSO for all apps: Require app users to authenticate through your SSO provider
• Publishing permissions: Control who can publish apps and which visibility levels each role can use
• Connector management: Control which external services are available in your workspace, and whether apps can use shared credentials, app user credentials, or both
• Disable Superagents: Hide Superagents from all workspace members if your organization has not approved AI agents for use
• External collaborators: Control whether any member or only admins can invite people from outside the workspace to collaborate on apps
• App transfers: Choose who can move apps out of the workspace: Workspace admins and owners, Workspace owners only, or Disabled

---

​

5. Set up automated provisioning (optional)

If your organization uses Okta or Microsoft Entra ID, set up SCIM to automatically sync workspace membership. When someone joins or leaves your organization in your identity provider, their Base44 access updates automatically. Learn how to set up automated provisioning with SCIM.

---

​

6. Set credit limits (optional)

Set a default monthly credit limit that applies to all workspace members, with the option to override the limit for specific individuals. This is useful for preventing any one member from consuming a disproportionate share of the workspace credit pool. Learn how to set credit limits for your members.

---

​

7. Move existing apps (optional)

If you or your team have apps in another workspace that you want to bring into the enterprise workspace, you can move them from the app’s dashboard. Because the app owner needs the right role in the enterprise workspace before the move, this is often a 2-step process between you and each app owner. Step 1: You invite the app owner (performed by the enterprise workspace admin)

1. Click your workspace name at the bottom left.
2. Click Settings → Members and groups → Invite Members → Invite by email.
3. Enter the app owner’s email address.
4. Assign a role. Editor or higher is recommended so the app owner can build and contribute in the workspace.
5. Click Invite.

Step 2: The app owner accepts the invite, then the app is moved The app owner opens the invitation email from Base44 and clicks Accept Invitation. The move then happens from the app’s current workspace and is performed by someone allowed to move apps out of it. On most plans that is a workspace owner; in an Enterprise source workspace, a workspace admin can also move apps out by default. If the app is in someone’s personal workspace, that person is the workspace owner and can move it themselves.

1. Go to your app’s dashboard.
2. Click Overview.
3. Click the More Actions icon next to View usage.
4. Click Move app.
5. Select the enterprise workspace from the Target Workspace drop-down.
6. Click Move App to confirm.

For full details on moving and transferring apps, see Managing workspace apps.

---

​

8. Explore more enterprise features

Once the basics are in place, explore additional security and access controls.

• IP allowlist: Restrict workspace access to approved IP addresses and networks
• Workspace secrets: Create and manage API keys for programmatic access to your workspace, including audit logs, the Monitoring API, SCIM, and app deployment
• Connector management: Manage connector availability across your workspace, review affected apps before disabling access, and control how apps connect to external services

---

​

Setup checklist

---

​

Getting help

As an enterprise customer, you have access to dedicated support.

• Dedicated account manager: Your account manager is your main point of contact for guidance and ongoing support
• Priority support: Use the Help menu inside Base44 to open a support ticket and get prioritized responses