# Adding Users to Multiple Workspaces

**URL:** <https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476>\
**Category:** Support, Troubleshooting, & Help\
**Tags:** workspace, saml\
**Created:** [May 15, 2024, 8:34pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476 "2024-05-15T20:34:26Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![cpuzzo](https://avatars.discourse-cdn.com/v4/letter/c/65b543/32.png) [@cpuzzo](https://community.tulip.co/u/cpuzzo)\
**Post date:** [May 15, 2024, 8:34pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/1 "2024-05-15T20:34:27Z")

</div>

I am working on a Tulip instance with 3 different workspaces. Unless I’m misreading, the Tulip docs ([Workspace Configurations and Settings](https://support.tulip.co/docs/workspace-configurations-and-settings)) seem to indicate that I should be able to add non-“Account Owner” users to multiple workspaces with different levels of access, but my attempts to do so have been unsuccessful.

When I open the user’s profile, I only see the option to select a single workspace. When I look at the “Roles” tab and go to “Assign” for a given role, I see checkboxes that make me believe I should be able to select multiple workspaces for the user but that doesn’t seem to work either. If I do attempt to grant the user another role in a different workspace from the “Roles” tab, it appears to give them that role and remove roles in other workspaces which is not what I’m trying to do. It occurred to me to go to the Workspace Settings to attempt to add the user, but all I see is a message that the “user is not part of this workspace” with no option to add them.

Am I doing something incorrectly, is there a known bug, or is this not a feature that is available on the platform yet?

---

<div class="post-metadata">

**Author:** ![John](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/john/32/4971_2.png) [@John](https://community.tulip.co/u/John)\
**Post date:** [May 16, 2024, 3:03pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/2 "2024-05-16T15:03:12Z")

</div>

Hi @cpuzzo, sorry you’re having trouble with this.

I’ve checked with our support team and this looks to be a bug. It’s a problem we’re aware of and there’s a fix being planned now. We can circle back when this is resolve. Thanks for flagging with us!

---

<div class="post-metadata">

**Author:** ![cpuzzo](https://avatars.discourse-cdn.com/v4/letter/c/65b543/32.png) [@cpuzzo](https://community.tulip.co/u/cpuzzo)\
**Post date:** [May 16, 2024, 4:30pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/3 "2024-05-16T16:30:16Z")

</div>

Thanks for looking in to this! Do you have an estimate on how long it might be before the fix is implemented/available?

---

<div class="post-metadata">

**Author:** ![John](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/john/32/4971_2.png) [@John](https://community.tulip.co/u/John)\
**Post date:** [May 16, 2024, 7:44pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/4 "2024-05-16T19:44:49Z")

</div>

Looks like we’re hoping to release a point release in the next few days, as soon as tonight. I’ll check back with the support team and let you know when it’s implemented.

---

<div class="post-metadata">

**Author:** ![John](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/john/32/4971_2.png) [@John](https://community.tulip.co/u/John)\
**Post date:** [May 20, 2024, 1:18pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/5 "2024-05-20T13:18:36Z")

</div>

Hi @cpuzzo just wanted to follow-up and see if this is working?

---

<div class="post-metadata">

**Author:** ![cpuzzo](https://avatars.discourse-cdn.com/v4/letter/c/65b543/32.png) [@cpuzzo](https://community.tulip.co/u/cpuzzo)\
**Post date:** [May 20, 2024, 1:33pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/6 "2024-05-20T13:33:02Z")

</div>

Hi @John - I just went in and tried again, but I encountered what appears to be the same issue.

---

<div class="post-metadata">

**Author:** ![John](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/john/32/4971_2.png) [@John](https://community.tulip.co/u/John)\
**Post date:** [May 20, 2024, 1:58pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/7 "2024-05-20T13:58:34Z")

</div>

Thanks, @cpuzzo let me check with the team and see if there isn’t something else going on.

---

<div class="post-metadata">

**Author:** ![kefl](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kefl/32/6822_2.png) [@kefl](https://community.tulip.co/u/kefl)\
**Post date:** [September 30, 2024, 10:29am UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/8 "2024-09-30T10:29:29Z")

</div>

Hello,

@John @cpuzzo Was this issue resolved?  
I’m trying to assign non Account Owners to multiple workspaces and the User setting page only has a drop down list to select one Workspace.

KR,  
Kevin

---

<div class="post-metadata">

**Author:** ![Beth](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/beth/32/5987_2.png) [@Beth](https://community.tulip.co/u/Beth)\
**Post date:** [November 22, 2024, 2:19pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/9 "2024-11-22T14:19:44Z")

</div>

Hi @kefl and @cpuzzo - wanted to follow up here, are you still having an issue with this?

There appears to be a potential feature limitation here, where you can’t have a non-Account Owner User in more than one Workspace when SAML is in use and ‘IdP Control Mode’ (not ‘Tulip Control Mode’).

Can you confirm if you are using the IdP Control Mode? If so, I can turn this into a Product Suggestion!

---

<div class="post-metadata">

**Author:** ![nathan.gillespie](https://avatars.discourse-cdn.com/v4/letter/n/8c91f0/32.png) [@nathan.gillespie](https://community.tulip.co/u/nathan.gillespie)\
**Post date:** [January 16, 2025, 9:31am UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/10 "2025-01-16T09:31:50Z")

</div>

Hi @Beth

I was just looking into this and saw this post.

We are starting our journey with Tulip and I would suggest we will need this in the very near future to have multiple workspaces (and potentially multiple roles).

---

<div class="post-metadata">

**Author:** ![Beth](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/beth/32/5987_2.png) [@Beth](https://community.tulip.co/u/Beth)\
**Post date:** [January 16, 2025, 1:38pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/11 "2025-01-16T13:38:13Z")

</div>

HI @nathan.gillespie - Welcome to Tulip and Tulip Community! 🌷

Thanks for letting us know. Will you be using / are already using SAML in IdP Control Mode?

---

<div class="post-metadata">

**Author:** ![nathan.gillespie](https://avatars.discourse-cdn.com/v4/letter/n/8c91f0/32.png) [@nathan.gillespie](https://community.tulip.co/u/nathan.gillespie)\
**Post date:** [January 16, 2025, 1:57pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/12 "2025-01-16T13:57:57Z")

</div>

We will be looking into using Tulip in IdP control mode as part of our user provisioning as we are using SAML (GxP environment) for the signatures.  
Currently we are only configured to use SAML so far.

---

<div class="post-metadata">

**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\
**Post date:** [January 22, 2025, 1:52pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/13 "2025-01-22T13:52:23Z")

</div>

Hey Nathan, I am a product manager that works on governance features at Tulip. Can you share your use case for multiple workspaces in one instance? Is it related to organizing multiple plants on one instance? Or is it more about managing the lifecycle of apps- dev/test/prod? Or something else?

---

<div class="post-metadata">

**Author:** ![nathan.gillespie](https://avatars.discourse-cdn.com/v4/letter/n/8c91f0/32.png) [@nathan.gillespie](https://community.tulip.co/u/nathan.gillespie)\
**Post date:** [February 26, 2025, 2:25pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/14 "2025-02-26T14:25:16Z")

</div>

Hi Kevin,

Sorry for the late reply!

So currently we have no business case at the moment as we are still rolling out to one plant.

Our workspaces are organised as our manufacturing sites within our instances. So I can envisage when we start rolling out to other plants we would need potentially certain users to support the other plants.

If we use Tulip Control mode we cant do that currently.

---

<div class="post-metadata">

**Author:** ![kevin.kononenko](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kevin.kononenko/32/32_2.png) [@kevin.kononenko](https://community.tulip.co/u/kevin.kononenko)\
**Post date:** [February 26, 2025, 5:01pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/15 "2025-02-26T17:01:26Z")

</div>

Appreciate it. And to help me understand a potential solution, do you have your IdP organized in such a way that it would make it easy to determine which users should be in which workspaces? Is it one field or multiple fields? IE is there a list of sites that they are a part of (possibly multiple fields), or is it that users with a certain level of seniority should have access to multiple workspaces (single field)?

---

<div class="post-metadata">

**Author:** ![nathan.gillespie](https://avatars.discourse-cdn.com/v4/letter/n/8c91f0/32.png) [@nathan.gillespie](https://community.tulip.co/u/nathan.gillespie)\
**Post date:** [February 26, 2025, 5:15pm UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/16 "2025-02-26T17:15:50Z")

</div>

I would look to have that the IdP presents multiple values in a single field.

Our IdP will check which AD groups the user is in and then proceed to fill the user attribute with the string of data.

---

<div class="post-metadata">

**Author:** ![kefl](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/kefl/32/6822_2.png) [@kefl](https://community.tulip.co/u/kefl)\
**Post date:** [April 9, 2025, 9:31am UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/17 "2025-04-09T09:31:35Z")

</div>

Hello Beth,  
Sorry for the very late answer.  
We are not even using SAML at the moment and the issue remains.  
If I understand my situation correctly, A user (not account owner) must choose ONE workspace, then you can assign a role or group to this user. Group and Roles are currently not workspace related.

A new product suggestion would be to modify the current structure to:

- A user does not need to choose a workspace
- A role is workspace dependent (Supervisor in Workspace A and Supervisor in Workspace B are two different roles)
- A user can have roles from different workspaces (Supervisor in Workspace A and Application viewer in Workspace B)

Why?  
Because some user may have roles across workspaces and don’t need to be Account owners. Because a user may have different roles depending on workspaces.  
Because roles could different from one workspace to another (maybe supervisor in Workspace A has more rights than supervisor in Workspace B).

What do you think?

KR,  
Kevin

---

<div class="post-metadata">

**Author:** ![nic.herbert](https://sea2.discourse-cdn.com/flex020/user_avatar/community.tulip.co/nic.herbert/32/9544_2.png) [@nic.herbert](https://community.tulip.co/u/nic.herbert)\
**Post date:** [September 25, 2026, 10:56am UTC](https://community.tulip.co/t/adding-users-to-multiple-workspaces/11476/18 "2026-09-25T10:56:31Z")

</div>

Hey everyone! I have been looking to see if there is an update with some of these requests?

It seems like to me that with the current Implementation of Workspaces and the mapping capabilities in Tulip, that instead of Workspace and Role being separate mappings, you need a hierarchical mapping that includes Workspace and Role as a single map so that a user can have multiple Workspace mappings with different roles in each.

Perhaps enabling some logic in the mapping capability could help here.

If we look at the groups that could be created, we would be doing something like you have already mentioned, but perhaps extended in such a way that it includes a workspace designation in the group name.

The only exception to this, I think, is that Account Owner has global permissions, and Workspace Owner has global workspace permissions, but all the other predefined roles would abide by the Workspace/Role assignment.
