> ## Documentation Index
> Fetch the complete documentation index at: https://docs.contraforce.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Workspace Center

> Manage customer tenants, pre-onboard new customers, monitor workspace health, and configure modules from one central location.

The **Workspace Center** is your administrative control panel for every customer tenant. Monitor active workspaces at a glance, pre-onboard new customers, and drill into per-workspace settings.

<Info>
  Workspaces represent individual customer tenants in ContraForce. Each workspace has its own data, configurations, modules, and user permissions.
</Info>

## What Can You Do Here?

<CardGroup cols={2}>
  <Card title="Pre-Onboard Customers" icon="user-plus">
    Create workspace placeholders before customer admins complete their setup
  </Card>

  <Card title="Manage Configurations" icon="gear">
    Edit module settings, integrations, and access from the per-workspace settings page
  </Card>

  <Card title="Monitor Health" icon="circle-check">
    See which workspaces are healthy, need attention, or are still onboarding
  </Card>

  <Card title="Control Permissions" icon="key">
    Manage module consents and workspace-level access
  </Card>
</CardGroup>

***

## Accessing the Workspace Center

<Steps>
  <Step title="Locate the Workspaces icon">
    Find the **Workspaces** icon in the left navigation bar
  </Step>

  <Step title="Open the page">
    Click the icon to open the Workspace Center
  </Step>
</Steps>

## Workspace Center Overview

The Workspace Center is split into two tabs and a row of rollup KPI cards.

<Frame caption="Workspace Center overview">
  <img src="https://mintcdn.com/contraforce/WrVM0ufvE8QAC_TC/images/onboarding/workspace-center/workspaces-01-workspace-overview.png?fit=max&auto=format&n=WrVM0ufvE8QAC_TC&q=85&s=584a1c2d2f4789a99e4cee96f00d931d" alt="Workspaces overview" width="2349" height="1419" data-path="images/onboarding/workspace-center/workspaces-01-workspace-overview.png" />
</Frame>

### Rollup KPI cards

The cards at the top of the page show counts at a glance and are clickable shortcuts.

| Card                     | What it shows                                                    | What clicking does                                                 |
| ------------------------ | ---------------------------------------------------------------- | ------------------------------------------------------------------ |
| **Workspaces connected** | Active customer workspaces in a healthy state                    | Switches to the Workspaces tab with the **All** filter             |
| **Need attention**       | Active workspaces that have a missing module or undeployed agent | Switches to the Workspaces tab with the **Needs attention** filter |
| **Onboarding**           | Pre-onboarded workspaces awaiting customer admin setup           | Switches to the Onboarding tab                                     |

### Tabs

| Tab            | What it contains                                                                                                                                |
| -------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- |
| **Workspaces** | Active customer workspaces. Search, filter by health, and click a card to open its settings page                                                |
| **Onboarding** | Pre-onboarded workspaces awaiting customer admin setup. Add a new workspace from here, or click an existing card to see its onboarding progress |

***

## Workspace Cards

Each workspace renders as a card. Click any card to open its settings page (no gear or equalizer button needed).

<Frame caption="Workspace card anatomy">
  <img src="https://mintcdn.com/contraforce/WrVM0ufvE8QAC_TC/images/onboarding/workspace-center/workspaces-02-workspace-card.png?fit=max&auto=format&n=WrVM0ufvE8QAC_TC&q=85&s=7cf2926a330937ee465e470a8a150a9d" alt="Workspace card" width="715" height="149" data-path="images/onboarding/workspace-center/workspaces-02-workspace-card.png" />
</Frame>

### What's on a card

| Element                             | Description                                                                                                                           |
| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| **Status light** (top-right corner) | Green: healthy. Amber: needs attention. Blue: pre-onboarded. Hidden on the service provider's own workspace                           |
| **Workspace name**                  | The customer's friendly name                                                                                                          |
| **Tenant ID**                       | The customer's Microsoft Entra tenant ID, in muted text below the name                                                                |
| **Inline chip**                     | "Your workspace" on the service provider's own card; "Service provider" if the row represents the MSP itself with no monitoring on it |
| **Modules pill**                    | Visible on the Workspaces tab. Healthy when at least one detection module is configured                                               |
| **Agent pill**                      | Visible on the Workspaces tab. Healthy when an Agent Center is deployed                                                               |

<Tip>
  Health pills only appear on the Workspaces tab. The Onboarding tab uses the blue **pre-onboarded** status light instead, since health checks are not meaningful until the customer admin completes their wizard.
</Tip>

***

## Search and Filter

Both tabs include a **Search by workspace name** field that filters cards as you type.

The Workspaces tab also has filter chips:

| Filter              | Description                                                                   |
| ------------------- | ----------------------------------------------------------------------------- |
| **All**             | Every active workspace, regardless of health                                  |
| **Needs attention** | Active workspaces with a missing detection module or no deployed Agent Center |
| **Healthy**         | Active workspaces with both a detection module and an Agent Center deployed   |

The Onboarding tab does not have filter chips. Use search to narrow the list when you have many pre-onboarded workspaces.

***

## Opening Workspace Details

Click any card to open the workspace's settings page.

<Frame caption="Workspace settings page after clicking a card">
  <img src="https://mintcdn.com/contraforce/WrVM0ufvE8QAC_TC/images/onboarding/workspace-center/workspaces-03-workspace-details.png?fit=max&auto=format&n=WrVM0ufvE8QAC_TC&q=85&s=ffbe0958eadb380c7ab4233cf96a8e38" alt="Workspace details" width="2344" height="1433" data-path="images/onboarding/workspace-center/workspaces-03-workspace-details.png" />
</Frame>

The settings page exposes four areas:

* **General**
  1. **Account Information and Service Provider Information**: account identifiers, points of contact, account ID, account type, and subscription information
  2. **Allow Service Providers to Run Gamebooks**: manage the team members responsible for approving Gamebooks that require manual authorization. Only users with the Workspace Owner role can be assigned as Gamebook Approvers
* **Modules**: configure and manage detection and response modules
* **IAM**: manage users, groups, and permissions at the workspace level
* **Notifications**: configure the notifications module for Microsoft Sentinel

***

## Pre-Onboarding a Customer Workspace

Pre-onboarding lets you prepare a customer's workspace before they complete the Setup Wizard themselves. The customer admin receives an invite email and finishes the rest. See [Customer Workspace Onboarding](/guides/onboarding/customer-workspace-onboarding) for the customer-side flow.

### Why pre-onboard?

<CardGroup cols={3}>
  <Card title="Faster Deployment" icon="bolt">
    Configuration is ready when the customer is
  </Card>

  <Card title="Reduced Errors" icon="shield-check">
    Verify settings before the customer is invited
  </Card>

  <Card title="Better Planning" icon="calendar">
    Schedule onboardings in advance
  </Card>
</CardGroup>

### Creating a pre-onboarded workspace

<Steps>
  <Step title="Open the Onboarding tab">
    Click the **Onboarding** tab at the top of the Workspace Center
  </Step>

  <Step title="Click Add workspace">
    The button is in the top-right of the toolbar. The right-hand rail panel opens with the **Add workspace** form

    <Frame caption="Add workspace rail open on the Onboarding tab">
      <img src="https://mintcdn.com/contraforce/WrVM0ufvE8QAC_TC/images/onboarding/msp-images/onboarding-07-add-customer-workspace.png?fit=max&auto=format&n=WrVM0ufvE8QAC_TC&q=85&s=1a640c2801a814465dd484a71dec8985" alt="Preonboard customer workspace" width="2230" height="1136" data-path="images/onboarding/msp-images/onboarding-07-add-customer-workspace.png" />
    </Frame>
  </Step>

  <Step title="Fill in customer details">
    | Field                              | Description                                                |
    | ---------------------------------- | ---------------------------------------------------------- |
    | **Workspace name**                 | Friendly label you'll use to refer to this customer        |
    | **Tenant ID**                      | The customer's Microsoft Entra tenant ID                   |
    | **Primary point-of-contact email** | The customer admin who will receive the invite             |
    | **Detection modules**              | Pre-select the security tools the customer is bringing     |
    | **Response modules**               | Pre-select the response capabilities the customer will use |
  </Step>

  <Step title="Click Send Invite">
    ContraForce sends an invite email to the POC. The new workspace appears as a card on the Onboarding tab with a **Pending customer setup** badge

    <Frame caption="New pre-onboarded workspace card">
      <img src="https://mintcdn.com/contraforce/WrVM0ufvE8QAC_TC/images/onboarding/msp-images/onboarding-10-customer-workspace-preonboarded.png?fit=max&auto=format&n=WrVM0ufvE8QAC_TC&q=85&s=e12d2aed4abd9d2f8f5414483378f86a" alt="Preonboarded customer workspace" width="2235" height="1168" data-path="images/onboarding/msp-images/onboarding-10-customer-workspace-preonboarded.png" />
    </Frame>
  </Step>
</Steps>

<Tip>
  Click any pre-onboarded card to see its onboarding progress in the right-hand rail. Use this to confirm which modules the customer has connected so far.
</Tip>

### When the customer finishes their wizard

You'll receive a real-time **Customer onboarding complete** notification in the portal. The card moves from the Onboarding tab to the Workspaces tab, and the status light flips from blue (pre-onboarded) to green (healthy) or amber (needs attention) based on what the customer connected.

For the post-go-live verification runbook, see [Workspace Onboarding Verification](/guides/onboarding/workspace-onboarding-checklist).

***

## Module Management

Each workspace can have different modules enabled based on customer needs. Open a workspace's settings page (click the card), then go to the **Modules** tab.

### Available modules

| Module                          | Description                    | Key features                                                           |
| ------------------------------- | ------------------------------ | ---------------------------------------------------------------------- |
| Microsoft Defender for Endpoint | Microsoft Defender integration | Endpoint detection, response actions, device management                |
| Microsoft Sentinel              | Microsoft Sentinel integration | Log analysis, custom alerts, threat hunting                            |
| SentinelOne XDR                 | SentinelOne XDR integration    | Read SentinelOne alerts and respond to SentinelOne endpoints           |
| CrowdStrike                     | CrowdStrike Falcon integration | CrowdStrike detection and response                                     |
| Notifications                   | Incident notification engine   | Email notifications for Microsoft Sentinel incidents based on severity |

### Configuring modules

<Steps>
  <Step title="Open the workspace">
    Click the workspace card to open its settings page
  </Step>

  <Step title="Go to the Modules tab">
    Navigate to the module you want to configure
  </Step>

  <Step title="Adjust settings">
    Enable or disable features, set thresholds, configure options
  </Step>

  <Step title="Consent permissions">
    Click **Consent** to authorize required permissions for the module
  </Step>

  <Step title="Save changes">
    Apply the configuration
  </Step>
</Steps>

### Module-specific settings

<Tabs>
  <Tab title="General">
    Basic workspace settings:

    * Workspace name
    * Alias name
    * Domain
    * Points of contact
    * Email address
    * Subscription ID
    * Subscription type
  </Tab>

  <Tab title="Modules">
    Enable or disable ContraForce modules:

    * Microsoft Sentinel (Detection + Response)

          <Warning>
            Prerequisites to manage this module:

            * Azure Role for Microsoft Tenant: Cloud App Admin, Application Admin, or Global Admin
            * ContraForce Workspace Role: Owner
            * Microsoft Subscription Permission: Owner
          </Warning>

          <Tip>
            You can access the Content Management System for Microsoft Sentinel by clicking the icon in the Microsoft Sentinel module.
          </Tip>
    * Microsoft Defender for Endpoint (Detection + Response)

          <Warning>
            Prerequisites to manage this module:

            * Azure Role for Microsoft Tenant: Cloud App Admin, Application Admin, or Global Admin
            * ContraForce Workspace Role: Owner
          </Warning>
    * SentinelOne XDR (Detection + Response)

          <Warning>
            Prerequisites to manage this module:

            * ContraForce Workspace Role: Owner
          </Warning>
    * Gamebooks for Defender XDR (Response for endpoints)
    * Gamebooks for Identity (Response for users)
    * Gamebooks for Microsoft 365 (Response for emails)
    * Gamebooks for Azure (Response for Azure NSG)
    * Gamebooks for SentinelOne (Response for endpoints)
  </Tab>

  <Tab title="IAM">
    Group Management. Workspace Roles:

    * Owner
    * Content Admin
    * Incident Responder
    * Incident Analyst

    Use Role Management. User Roles:

    * Owner
    * Content Admin
    * Incident Responder
    * Incident Analyst
  </Tab>

  <Tab title="Notifications">
    Notification Settings:

    <Warning>
      Prerequisites to manage this module:

      * ContraForce Workspace Role: Owner
      * Sentinel Module Configured
    </Warning>

    Microsoft Sentinel Notifications Settings Based on Severity:

    * High
    * Medium
    * Low
    * Info
  </Tab>
</Tabs>

***

## Permission Consent

Some features require explicit consent to Microsoft enterprise applications.

### Why consent is required

ContraForce uses Microsoft Graph API and other APIs to:

* Read security alerts and incidents
* Execute response actions (isolate devices, disable users)
* Access log data for analysis

These permissions must be granted by a tenant administrator.

### Granting consent

<Steps>
  <Step title="Open the workspace settings">
    Click the workspace card to open its settings page
  </Step>

  <Step title="Go to the Modules tab">
    Find the module that needs consent
  </Step>

  <Step title="Click Consent">
    A Microsoft authentication window opens
  </Step>

  <Step title="Sign in as admin">
    Sign in with a Cloud App Admin, Application Admin, or Global Admin role
  </Step>

  <Step title="Review and accept">
    Review the requested permissions and click **Accept**
  </Step>
</Steps>

<Warning>
  Consent requires administrator privileges in the customer's Microsoft tenant. Work with your customer's IT team if you don't have admin access.
</Warning>

<Card title="Learn more about platform permissions" icon="arrow-up-right-from-square" href="/guides/onboarding/platform-onboarding">
  Complete guide to platform users, groups, permissions, and modules
</Card>

***

## Best Practices

<AccordionGroup>
  <Accordion title="Use consistent naming conventions">
    Name workspaces consistently (for example, "CustomerName: Primary") so they're easy to identify in search and filters.
  </Accordion>

  <Accordion title="Pre-onboard before customer meetings">
    Create pre-onboarded workspaces before onboarding calls so the customer admin can complete their wizard immediately.
  </Accordion>

  <Accordion title="Watch the Need attention rollup">
    Periodically click the **Need attention** rollup card to surface workspaces missing a detection module or Agent Center.
  </Accordion>

  <Accordion title="Verify consent status regularly">
    Token expirations or policy changes can affect access. Open a workspace's Modules tab to confirm everything still shows **Connected**.
  </Accordion>

  <Accordion title="Document module configurations">
    Keep records of which modules and settings are enabled for each customer for support and renewal conversations.
  </Accordion>
</AccordionGroup>

***

## Troubleshooting

### Common Issues

| Issue                                            | Possible cause                            | Solution                                                                   |
| ------------------------------------------------ | ----------------------------------------- | -------------------------------------------------------------------------- |
| Workspace shows no data                          | Consent not completed                     | Re-run consent flow with admin credentials                                 |
| Module won't enable                              | Missing permissions                       | Verify required permissions are granted                                    |
| Pre-onboarded card never moves to Workspaces tab | Customer admin hasn't finished the wizard | Resend the invite or contact the POC                                       |
| Configuration won't save                         | Validation error                          | Check for required fields or invalid values                                |
| Status light is amber                            | Detection module or Agent Center missing  | Open the workspace card and complete the missing module or deploy an agent |

<Note>
  If you encounter persistent issues with workspace configuration, contact [support@contraforce.com](mailto:support@contraforce.com) with the workspace name and error details.
</Note>

***

## Related Guides

<CardGroup cols={2}>
  <Card title="MSP Platform Onboarding" icon="building-shield" href="/guides/onboarding/platform-onboarding">
    Granting access, Agent Center, connecting your own sources
  </Card>

  <Card title="Customer Workspace Onboarding" icon="user-check" href="/guides/onboarding/customer-workspace-onboarding">
    What customer admins see after the invite email
  </Card>

  <Card title="Workspace Onboarding Verification" icon="circle-check" href="/guides/onboarding/workspace-onboarding-checklist">
    Post-go-live verification runbook
  </Card>

  <Card title="Multi-Tenant Features" icon="building" href="/guides/getting-started/multi-tenant-features">
    Managing multiple workspaces
  </Card>
</CardGroup>

***

<Note>
  Questions about the Workspace Center? Contact us at [support@contraforce.com](mailto:support@contraforce.com).
</Note>