Manage internal workspaces

Internal workspaces enable you to share projects with collaborators and manage access to them within your team. As a Super Admin or Team Admin, you can manage resources in your internal workspaces, enabling you to align your internal workspaces with your organizational goals. Manage which team members can create internal workspaces, which Collection Editors can share collections with guest users, mock server privacy settings, and which external packages are allowed in scripts.

Internal workspaces in Postman

An internal workspace is a type of workspace that enables you to share projects with collaborators and manage access to them within your team. Learn more about creating workspaces.

Manage internal workspaces

As a Super Admin or Team Admin, you can limit or prohibit creation of new internal workspaces by users on your team.

Fellow Super Admins and Team Admins can always create workspaces. For other team members, you can specify which users and groups have permission to create workspaces.

If you specify users and groups, all other team members will require approval to create workspaces. A Super Admin, Team Admin, or user with permission to create workspaces can approve a request. The workspace's visibility will be set to Internal and Only you and invited people until the request is approved.

If you give all team members permission to create internal workspaces, team members won't need approval to create them.

Partners and Guests can't create internal workspaces.

Give permission to create internal workspaces

To specify users or groups who can create internal workspaces, do the following:

Select Team > Team Settings in the Postman header.
Select Team resources in the sidebar, then select Workspaces.
Select Specific people or groups.
Specify users or groups who can create workspaces.
Select Save Changes.

Remove permission to create internal workspaces

To remove permission to create internal workspaces from users or groups, do the following:

Select Team > Team Settings in the Postman header.
Select Team resources in the sidebar, then select Workspaces.
Select the Specific people or groups section to edit it.
Select next to a user or group.
Select Save Changes.

Give all team members permission to create internal workspaces

To give all team members permission to create internal workspaces, do the following:

Select Team > Team Settings in the Postman header.
Select Team resources in the sidebar, then select Workspaces.
Select All team members.
Select Save Changes.

Approve workspace creation requests

To see all workspaces, on the Home page, select Workspaces. You can also select Workspaces > View all workspaces in the Postman header. A list of workspaces appears.

To approve a request to create a workspace, select the Pending requests tab. This is where you can approve requests to change the visibility of a workspace, for example, when a user wants to make an existing workspace public.

Requests to create a public workspace are approved by Community Managers. Requests to create a Partner Workspace are approved by Partner Managers. If no Partner Manager role is assigned, the Team Admin is auto-assigned the Partner Manager role when they create their first Partner Workspace.

Community Managers can also approve requests to change a workspace's visibility to public from its workspace settings. Learn more about converting a workspace to a public workspace.

Approve request to change workspace visibility

As a Super Admin or Team Admin, you can allow or prohibit Collection Editors from sharing collections with Guests in internal workspaces. Learn more about sharing collections with Guests.

Select Team > Team Settings in the Postman header, select Team resources in the sidebar, then select Collections. To manage whether Collection Editors can share collections with Guests, select the toggle next to Allow Editors to share collections with Guests. By default, Collection Editors are allowed to share collections with Guests.

Allow Editors to share collections with Guests

When you allow this, Collection Editors can choose whether Guests can view a specific collection and send requests in that collection. Guest users are assigned the Guest role at the team level and a limited Viewer role at the collection level.

When you prohibit this, Collection Editors don't have the option to choose whether Guests can view a specific collection. Guest users already assigned the Guest role will continue to have access to collections previously shared with them. New Guests can no longer be assigned the Guest role.

Manage mock server privacy

As a Super Admin or Team Admin, you can enable or prohibit users from creating public mock servers.

To prohibit users from creating public mock servers, do the following:

Select Team > Team Settings in the Postman header.
Select Team resources in the sidebar, then select Mock servers.
Select the toggle next to Disable creating public mock servers.

By default, users are able to create both public and private mock servers. However, new mock servers are set to public by default. Learn more about private and public mock servers.

Manage external packages

Managing external packages is supported on Postman Enterprise plans.

As a Super Admin or Team Admin, you can allow or prohibit team members from using packages from external package registries, such as npm and JSR, in their scripts. You can also configure which external packages your team members are allowed to use in scripts. Learn more about using external packages in Postman.

To manage external packages in your team, do the following:

Select Team > Team Settings in the Postman header.
Select Team resources in the sidebar, then select External packages.
Choose one of the following from the dropdown list:
- Allow all packages - Allow your team members to use any supported external packages.
- Allow selected packages - Limit the external packages your team members can use. Learn how to allow specific external packages in your team.
- Don't allow - Prohibit your team members from using any external packages.

Allow specific packages in your team

After you've selected Allow selected packages in the dropdown list, enter external packages from npm or JSR you want to allow your team to use in their scripts. Note that your team members who aren't Admins can visit this page to view the external packages allowed in your team.

Enter an external package using the registry-name:package-name@version-number syntax. See syntax examples for more details.
Select Add Package to add the external package to the list of allowed packages. You can also select Return or Enter to add the external package.

To remove an external package from the list of allowed packages, hover over the package and select Remove.

Allow selected external packages in your team

Syntax examples for specifying allowed packages

The following shows some examples of how to specify allowed external packages. Note that Postman supports glob pattern syntax for specifying allowed external packages and their version numbers.

To allow a package from a specific registry with an exact major version number, you can use syntax like:
```
npm:ajv@8.12.0
```
To allow a specific major version and any minor version number, you can use syntax like:
```
npm:lodash@4.*
```
To allow all external package from a specific registry, you can use syntax like:
```
jsr:*@*
```
To allow all external packages in a scope, you can use syntax like:
```
npm:@types/*@*
```