--- title: "How to: Manage Service Access" slug: "how-to-manage-service-access" updated: 2025-12-29T15:35:14Z published: 2025-12-29T15:35:14Z canonical: "docs.unqork.io/how-to-manage-service-access" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.unqork.io/llms.txt > Use this file to discover all available pages before exploring further. # How to: Manage Service Access ## Overview Creators **manage service access** using the [Services Administration's](/v1/docs/services-administration) Manage Access tab. Managing services access allows Administrators to limit which services a [workspace](/v1/docs/introduction-to-workspaces) can use. Limiting services to specific workspaces ensures Creators have access to only the APIs they need for their project, preventing unauthorized APIs in an [environment](/v1/docs/environment) that might host multiple teams and workspace projects. The benefits of limiting access to services include: - **Relevant Services for Creators**: Creators only see services their workspaces have access to instead of all services in the environment. - **Improved Security**: Prevent users from accessing services that they don't have permission to use. - **Precise Control**: Administrators decide what services are available to the environment or individual workspace. ## Managing Access When Creating a Service When Administrators add a new service using the Services Administration page, they must specify if the service is shared to the environment or with one or more workspaces. To create a new service and limit it to one or more workspaces: [![A static image displaying the Create New Service modal, the Service Title and Service Name fields are highlighted.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Address_Services_AddAService_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Address%20Services%20AddAService.jpg?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) 1. At the top right of the Unqork Designer Platform, click the **Administration** button. 2. Under Integration, select **Services Administration** 3. Click **+ Add a Service**. 4. In the **Service Title** field, enter a name for the new service. For example, `{teamName - Google Places}`, replace `{teamName}` with your initials or the name of your application team. 5. In the **Service Name** field, enter the same name in lowercase letters, using hyphens instead of spaces. For example, `{teamName}-google-places`. > [!NOTE] > Use lowercase alphanumeric characters along with a hyphen (-). A Service Name cannot start or end with a hyphen. Also, there cannot be consecutive hyphens in a Service Name. 6. Click Next. The Manage Access tab displays. 7. From the **Share to** field, select **![Inline image displaying a selected radio button.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/radioComponent_teal_icon(20).png?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) Workspaces**. The **Select Workspaces to Share This Service With*** field displays. 8. From the **Select Workspaces to Whare This Service With*** drop-down, select or enter the name of one or more workspaces where you want to share the service. [Video](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Services_Administration_HowTo_SelectWorkspaces.webm?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) 9. Click **Create**. The new service's page displays. The service is now ready to be configured, and only Creators in workspaces that have been assigned access can view it. ## Managing Access for an Existing Service Existing services in an environment can be limited to specific environments by changing the service's settings. To limit access to an existing service from the Services Administration page: 1. Navigate to a service and click Manage ▾. 2. Click **Open**. The service's information page displays. 3. Click **![Edit Icon](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/draft_white_icon.png?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) Edit**. The service page unlocks. 4. From the Service configuration menu, select **Manage Access**. 5. Set the **Share to** field to **![Inline image displaying a selected radio button.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/radioComponent_teal_icon(20).png?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) Workspaces**. The **Select Workspaces to Share This Service With*** field displays. 6. From the **Select Workspaces to Share This Service With*** drop-down, select or enter the name of one or more workspaces where you want to share the service. [Video](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/Services_Administration_HowTo_SelectWorkspaces2.webm?sv=2026-02-06&spr=https&st=2026-11-08T18%3A05%3A09Z&se=2026-11-08T19%3A05%3A09Z&sr=c&sp=r&sig=a24FthqT2tLQYbxbDe3IvNWT2QINSzbXh3jbniwiEoQ%3D) 7. Click **Save Changes**. The page refreshes and displays the Services Administration's service list. The service is now only usable by Creators in workspaces that have been assigned access to it. ## Best Practices - While WSRBAC (Workspace Role-Based Access Control) restricts what elements are available in the UI, it does not restrict how Creators can customize their application’s behavior or what the application has access to. As long as a workspace module is shared with your environment, it can use all services limited to other workspaces. Other workspace modules cannot use the service unless that service is assigned to that module's workspace. When using WSRBAC (Workspace Role-Based Access Control), Workspace roles and user permissions override environment user permissions. For example, a user might have access to all services in an environment through their role. But if a service is limited to a specific workspace and the user does not have access to that workspace, then they do not have access to that service. Also known as Unqork Users, or Designer Users; is anyone who is inside the Unqork platform. APIs (application programming interfaces) are a set of protocols and definitions developers use to build and integrate application software. APIs act as the connective tissue between products and services. WSRBAC (Workspaces Role-Based Access Control) is a method to control user access to a workspace. Users must be assigned to a workspace using WSRBAC before they can view or edit applications and modules inside the space. The UI (user interface) is a device's end-user interaction and communication point. It can include display screens, keyboards, and mouse. It is also how a user interacts with your application.