Org Loom
Canvas Docs Pricing

Walkthrough

Manage a Team workspace

Use Workspace settings to manage Team members, permissions, invitations, Salesforce org filtering, billing, and activity. This guide also explains which controls belong to the workspace and which belong to an individual account.

Before you begin

From the canvas, open the account and workspace menu, select Settings, and then select the Workspace tab. A Team workspace has an owner, one or more admins, and members. Admins can manage most workspace settings; a few ownership and deletion actions are reserved for the owner.

Confirm the active workspace before changing anything. Membership, permissions, billing, AI-client access, and activity are all scoped to the workspace currently shown in the workspace switcher.

The four tabs

  • Account contains your Org Loom sign-in identity, account controls, and the option to join another workspace.
  • Workspace contains the name, members, permissions, feature settings, AI-client access, Salesforce org filtering, and invitations.
  • Billing contains the plan, Team seats, AI usage, credits, subscription controls, and payment portal.
  • Activity contains workspace events and Salesforce data-operation history for the active org.

Manage members and roles

The Members section lists each person's role, email, join date, and any additional permissions granted to them.

  • Change a Member to Admin when they should manage members, settings, Salesforce org filtering, billing, and activity exports.
  • Change an Admin to Member to remove those admin controls. The last admin cannot be demoted or removed.
  • Choose Remove to end a person's workspace access. Their Org Loom account, personal workspace, and Salesforce connections are not deleted.

The owner can transfer ownership to another admin with Make owner. Promote the person to Admin first. Read the billing warning carefully: the previous owner's payment method remains on file until the new owner replaces it through the Stripe portal.

The Members section shows each member's workspace role and feature permissions.
The Members section shows each member’s workspace role and feature permissions.

Manage member permissions

Select Feature permissions beside a member to grant or revoke sensitive capabilities such as running scripts, bulk editing, AI generation, AI access to canvas data, uploading, recalling uploads, managing billing, and viewing activity history.

Manage billing and View activity history can be granted separately to a member. An admin can grant either permission without changing the person's workspace role.

Salesforce permissions still apply. An Org Loom feature permission does not grant object, field, or record access inside Salesforce.

Configure workspace features

Admins can change the settings available for the current plan:

  • Salesforce org filtering lets administrators allow all orgs, require production orgs to appear on the workspace allowlist, or require every Salesforce org to appear on it.
  • Require approval to join workspace places invite-code users in a pending queue until an admin approves them.

Only settings meaningful for the current plan are shown. Members can see the settings but cannot change them.

Manage AI client access

The AI client access (MCP) section is on the Workspace tab because each connection token is bound to both the user who generated it and the active workspace. It cannot act as another member, and it cannot be used to read or propose changes in another workspace.

Each member creates and revokes their own token. An admin can also revoke a member's token and grant or revoke that member's AI on canvas (MCP) permission. See Connect an AI client.

Invite teammates

  1. Open Member invitations on the Workspace tab.
  2. Under Invite someone, choose Create invitation.
  3. Copy the invitation link, or share the code separately.
  4. Revoke an outstanding invitation if it should no longer be used.

Invitations expire after one week and can be used once. Active members and outstanding invitations count toward the paid seat limit, so remove an unused invitation before creating another when the workspace is full.

If Require approval to join workspace is on, using the link or code creates a request under Invitations → Pending join requests. The person joins only after an admin approves it. See Join a workspace.

Manage Salesforce org access

Under Salesforce org filtering, choose whether to allow all orgs, allowlist production orgs, or allowlist every org. For each listed org, enter a name and its Current My Domain base URL.

  • https://acme.my.salesforce.com is a valid production example.
  • https://acme--uat.sandbox.my.salesforce.com is a valid sandbox example.
  • Generic login hosts, Lightning record URLs, paths, and query strings are not accepted.

The allowlist applies to the whole workspace. Each member still uses their own Salesforce credentials and Salesforce permissions. See Configure Salesforce org filtering.

Manage billing and seats

The Billing tab shows the current plan, price, AI usage, add-on credits, and subscription status for members with Manage billing. Other members see an explanation instead of billing details.

  • Use the Team seat stepper, then choose Update seats to confirm a change. Changing the number alone does not bill it.
  • A Team workspace must keep at least three seats and cannot reduce below its current member count.
  • Use Manage billing for payment methods, billing contact details, and invoices.
  • Use Buy AI credits for a one-time usage addition. See Buy and manage AI credits.
  • Use Cancel plan to schedule cancellation at the end of the current period. Resume plan reverses it before the period ends.

A failed payment appears in Billing. Update the payment method before the retry period ends. Org Loom keeps access during Stripe's normal payment-retry process.

Review and export activity

The tab is available to members with View activity history. Workspace admins receive this permission by default.

The Activity tab separates:

  • Workspace activity, such as membership, settings, permission, billing, and access decisions.
  • Salesforce data activity for the active org, such as uploads and other delivered record operations.

Filter by action or date, then choose Export CSV where available. Export CSV downloads workspace activity only. For Salesforce data activity, use Salesforce reporting on the package's Audit_Event__c records. See Review activity history.

Leave or delete a workspace

  • A member can choose Leave this workspace. The last admin must promote another admin before leaving.
  • The owner can delete a non-personal workspace by typing its name and choosing Delete workspace.

Workspace deletion cannot be undone from Org Loom. It removes memberships, invitations, settings, grants, subscription, and workspace activity, and it ends access to the workspace's canvases through Org Loom. It does not delete Salesforce records or other Salesforce data.

See also