Skip to main content
In Vantage, a workspace is a way to separate your provider integrations into distinct cost views. Teams can use workspaces to create focused views of costs and even restrict access to costs within each workspace using Role-Based Access Controls (RBAC) (Enterprise customers). You can specify which integrations are available in which workspaces. Some use cases for workspaces are listed below.
  • You may have multiple accounts within the same cloud provider, such as Azure or AWS. You can use a single Vantage workspace to ingest costs for all these accounts into the same view.
  • Create a distinct Vantage workspace for each of your environments, such as Production, Staging, and Development. Then, specify which provider accounts are associated with which workspace. For example, a particular Datadog account may be associated with only your Development workspace.
  • If you manage multiple customers, you can create individual workspaces for each customer account (Customer A, Customer B, etc.). This allows you to separate and manage cost data for each customer independently. Then, you can connect only the corresponding integrations to each customer’s workspace, ensuring that they have access only to their data and reports.
To get started with workspaces and workspace integrations, you can also view a video demo on Vantage University .
If you have more than one workspace in your Vantage account, the Workspaces menu is displayed on the top left of the console. You can select any of the listed workspaces to move between each workspace.

​
Create a Workspace

When your Vantage account is created, you are assigned a Default workspace. You can create other workspaces in addition to the default workspace. To create a new workspace, complete the following steps:
1
From the top navigation menu, click Settings.
2
On the left navigation, under General Settings, click Workspaces.
3
Click Create a Workspace.
4
Enter a Name for your new workspace (e.g., Management), then click Create.

​
Manage Workspaces

All your existing workspaces are displayed on the Workspaces Settings screen. Select a listed workspace to view additional details, such as:
  • Turn off Active Resource Syncing. Turn off automatic syncing if you do not want Vantage to be automatically pulling active resource details from your account. This option is useful if you find Vantage is making too many API calls to your AWS endpoints.
  • View team workspace access. See the Role-Based Access Control documentation for more information about teams.
  • Set whether anomaly detection and forecasting are enabled by default for Cost Reports in the workspace.
  • View configuration details for the workspace, including the workspace token, which is used as the workspace identifier in API calls.
  • Delete the workspace.
    Note that this action is not reversible.

​
Set Workspace Defaults for Forecasts and Anomalies

Organization Owners can choose whether Vantage runs anomaly detection and forecasting for Cost Reports in a workspace. Both are enabled unless you change them:
  1. Navigate to Settings > Workspaces and select the workspace.
  2. Under Cost Report Settings, set Anomaly Detection and Forecasts to Enabled or Disabled.
These defaults apply to every Cost Report in the workspace that doesn’t have its own setting, including existing reports. A report that’s set to On or Off in Manage Forecasts & Anomalies keeps that setting until you clear it. For accounts using Access Policies, disabling these defaults for workspaces where they aren’t needed is the simplest way to manage Build Hours consumption.

​
Manage Workspace Provider Integrations

Once you connect a cloud provider to Vantage, and the integration status is Stable with costs fully imported, you’ll need to specify the workspaces where this integration should be accessible for creating reports and viewing costs. To manage the workspaces associated with an integration:
1
From the top navigation, click Settings.
2
From the left navigation, click Integrations.
3
All your provider integrations are displayed. Select an integration from the list.
4
The provider’s integration page is displayed. Click the settings icon next to a listed account.
5
The Manage Connection page is displayed. Under Workspace Access, select or deselect the checkbox next to a listed workspace to specify which workspaces the integration is associated with.
In the below example, the Fastly integration is only available in the Demo Accounts workspace. If you navigate to the Management or Marketing workspace, you’ll be unable to view Fastly cost data in Cost Reports or other Vantage features.
The integration workspace is displayed with an arrow pointing from the settings icon. The arrow points to the integration screen with another arrow pointing from the settings icon. That arrow points to the specific integration and the Workspace access section.

​
Troubleshoot a Missing Integration

An integration can be fully healthy and still not appear in Cost Reports, Dashboards, or other features until both of the following are true:
  • The integration is assigned to the workspace you are currently viewing.
  • Your user or team can access that workspace.
If an integration looks Stable on the Integrations page but you still cannot see its costs, verify workspace assignment and workspace access before troubleshooting the provider connection itself.

​
Restrict Which Cost Data a Team Can See

Assigning integrations to workspaces is one way to control which cost data a team can see, but a report’s own filters are not a security boundary: anyone with edit access can change or remove them and see everything in the workspace. To limit a team to a subset of your cost data, use one of these approaches rather than relying on how a report is built:
  • Assign integrations to separate workspaces. Put only the relevant provider integrations in a workspace and grant the team access to just that workspace. Use this when groups need entirely separate places to work and don’t share reports.
  • Apply an Access Policy (Enterprise). A policy filters the cost and resource data itself, so several teams can share one workspace, the same dashboards, and the same reports while each sees only its own slice of the data. Use this when duplicating your reporting setup per workspace would be impractical.
The two approaches work together, and many organizations use both.
Access Policies apply across your whole Vantage account rather than per workspace, so a policy follows a person into every workspace they visit. If you use a workspace per customer or per environment, make sure the accounts, providers, and regions a policy names exist in every workspace its teams can reach. A policy listing only production accounts will make that team’s reports come back empty in a development workspace.

​
AWS Management and Member Accounts

When you connect an AWS management account (root account) to Vantage, all member accounts in your AWS organization are automatically linked to the management account. Member accounts inherit the workspace assignments from the management account and cannot be assigned to different workspaces while they remain linked. To assign a member account to a separate workspace from the management account, you must first unlink it. When viewing a linked member account’s integration settings, you’ll see the message “To assign this account to separate workspaces, you must first unlink it from the management account.” The workspace checkboxes are disabled until you click Unlink from Management Account. Once unlinked, you can assign the member account to different workspaces independently.
Unlinking member accounts has its own implications. See the Unlinking Member Accounts documentation for details.