Skip to content
MoftgateMoftgate Docs
Product guide

Workspace Settings

A complete guide to the Workspace Settings area: manage tags, custom fields, KB exclusions, team members, role-based permissions, and the activity audit log.

What are Workspace Settings?#

The Workspace Settings area groups all workspace-level administration in one place. It is available only to admin users and is reachable from the General navigation menu, the main Settings hub, and the global Spotlight search.

The page is organized into tabs - Tags, Custom fields, KB exclusions, Team, Permissions, and Activity - so you can jump straight to what you need. The active tab is stored in the URL, which means you can bookmark or share a link that opens on the exact section you want.

Everything is tracked
Every change made in Workspace Settings is recorded in the Activity audit log, and every destructive action is guarded by a confirmation step.
Workspace Settings with tabs for tags, custom fields, KB exclusions, team, permissions, and activity.
Workspace settings screen
Close image

How to get there

  1. 1
    Open the General menu

    In the left navigation sidebar, expand the General section to reveal its sub-items.

  2. 2
    Go to Settings

    Select Settings from the General menu to open the main settings hub.

  3. 3
    Choose Workspace

    On the settings hub, open the Workspace card. You can also reach it directly via the global Spotlight search by typing "workspace".

My Moftgate Account & SSO#

Under Settings > Account Settings, the "My Moftgate Account" tab establishes a direct, cryptographically authenticated bridge between your local management console and the centralized My Moftgate Customer Hub.

From this tab, administrators can monitor hardware Machine ID pairing, check real-time cloud synchronization telemetry, and click "Connect to My Moftgate Portal" for instantaneous Single Sign-On without typing passwords or sharing API secrets.

Account Settings > My Moftgate Account tab showing live connection status, hardware Machine ID, and the Open Moftgate Portal SSO action.
On-Premises Console My Moftgate Account Screen
Close image

Connecting to Customer Hub

  1. 1
    Go to Account Settings > My Moftgate Account

    Navigate to Settings > Account Settings and select the "My Moftgate Account" tab.

  2. 2
    Verify Connection Status & Machine ID

    Review your hardware Machine ID, active license tier, synchronized endpoint count, and live connection health status.

  3. 3
    Launch 1-Click Cryptographic SSO

    Click "Connect to My Moftgate Portal" to securely transition to the Customer Hub without re-entering credentials.

  4. 4
    Manage Entitlements & Support in Customer Hub

    Download offline airgap license keys, purchase quota additions, or open direct escalation tickets with the engineering team.

Explore the Full Customer Hub Documentation
Need to generate offline airgap keys, purchase 200+ endpoint quota expansions, or submit engineering tickets? Read the dedicated Customer Hub (My Moftgate) Guide.

Managing tags#

Tags help you group and filter endpoints. Each tag can have a color so it stands out in lists and dashboards. Use tags to mark ownership, environment, criticality, or any other label that fits your workflow.

  1. 1
    Open the Tags tab

    On the Workspace Settings page, select the Tags tab. The active tab is reflected in the URL so you can bookmark or share a direct link.

  2. 2
    Create a tag

    Click the add button, enter a name, and pick a color. Colors help you spot tags at a glance across endpoint lists and dashboards.

  3. 3
    Edit a tag

    Click a tag name to rename it or change its color. Existing assignments keep the updated label and color automatically.

  4. 4
    Delete a tag

    Open the delete action and confirm. If the tag is still assigned to one or more endpoints, the deletion is blocked - remove all assignments first.

Assigned tags are protected
You cannot delete a tag that is still assigned to one or more endpoints. Remove all assignments first, then delete the tag.

Custom fields#

Custom fields let you capture metadata about your endpoints beyond the built-in attributes. Choose a field type, define the options for select-style fields, and decide where the field applies.

Available field types

TypeDescription
TextFree-form string value
NumberNumeric value (integer or decimal)
BooleanTrue / false toggle
DateCalendar date picker
SelectSingle choice from a predefined list
Multi-selectMultiple choices from a predefined list

Scoping a custom field

A custom field can apply workspace-wide or be limited to a specific set of endpoints. Scoping keeps metadata relevant and avoids clutter on endpoints where it does not apply.

ScopeApplies to
All endpointsApplies to every endpoint in the workspace
GroupRestricted to endpoints in a specific group
ProfileRestricted to endpoints assigned a specific agent profile
TagRestricted to endpoints carrying a specific tag
EndpointRestricted to a single named endpoint
  1. 1
    Open the Custom fields tab

    Select Custom fields from the Workspace Settings tabs. The tab is stored in the URL for easy sharing.

  2. 2
    Create a field

    Click the add button, give the field a name, and choose a type (text, number, boolean, date, select, or multi-select). For select types, define the available options.

  3. 3
    Choose a scope

    Decide where the field applies: all endpoints, a specific group, profile, tag, or a single endpoint. Scoping keeps metadata relevant and avoids clutter.

  4. 4
    Save and review

    Once saved, the field becomes available to agents and automation actions. Endpoint-scoped values are delivered to agents automatically.

Delivered to agents
Custom field definitions and endpoint-scoped values are delivered to agents automatically, and the set_custom_field automation action can populate values for you.

KB exclusions#

KB exclusions let you prevent specific updates from being installed through patch management. This is useful for updates that are known to cause issues in your environment or that must be controlled by another process.

  1. 1
    Open the KB exclusions tab

    Select KB exclusions from the Workspace Settings tabs.

  2. 2
    Add an exclusion

    Click the add button and enter the KB or update identifier you want to exclude from patch management.

  3. 3
    Choose a target scope

    Decide which endpoints the exclusion applies to: all endpoints, a group, a profile, a tag, or a single endpoint.

  4. 4
    Save

    Active exclusions are delivered to agents automatically. The agent skips the excluded updates before installation, so they are never installed on the targeted endpoints.

Target selection
Each exclusion can target all endpoints, a group, a profile, a tag, or a single endpoint - the same flexible targeting used across the platform.

Team management#

The Team tab is where you manage the panel user accounts that can sign in to Moftgate. Create new users, update their details, assign roles, and remove users who no longer need access.

  1. 1
    Open the Team tab

    Select Team from the Workspace Settings tabs to see all panel user accounts.

  2. 2
    Invite or create a user

    Click the add button to create a new panel user. Provide the required details and assign a role.

  3. 3
    Edit a user

    Click a user entry to update their details or change their assigned role.

  4. 4
    Delete a user

    Open the delete action and confirm. A confirmation step prevents accidental removal of team members.

Deleting a user needs confirmation
Removing a team member requires a confirmation step so accounts are not deleted by accident.

Permissions#

The Permissions tab manages role-based access control. Each role has a set of allowed actions; granting or revoking a permission updates what every user holding that role can do.

  1. 1
    Open the Permissions tab

    Select Permissions from the Workspace Settings tabs to manage role-based access control.

  2. 2
    Review roles

    Each role lists the actions it is allowed to perform. Review the current grants before making changes.

  3. 3
    Grant or revoke permissions

    Toggle or assign permissions for a role. Changes take effect for every panel user holding that role.

  4. 4
    Save

    Permission updates are audit-logged so you can trace who changed access and when.

Changes are audit-logged
Permission changes are recorded in the Activity log so you can trace who changed access and when.

Activity log#

The Activity tab is a paginated audit log of every change made in Workspace Settings. Use it to review who did what and when - from tag edits to permission grants and team membership changes.

  • Chronological, newest-first record of workspace changes
  • Shows the panel user who performed each action
  • Covers all tabs: tags, custom fields, KB exclusions, team, and permissions
  • Paginated so you can browse long histories without loading everything at once

Deletion guards#

To prevent accidental data loss, Workspace Settings blocks destructive actions that would leave dangling references. The table below summarizes what is protected and how to proceed.

EntityRuleHow to proceed
TagsA tag assigned to one or more endpoints cannot be deleted.Remove all assignments first, then delete. The tag and its assignments are preserved until then.
ProfilesAn agent profile still assigned to endpoints cannot be deleted. The default profile is always protected.Unassign the profile from all endpoints first. The default profile can never be deleted under any circumstance.

FAQ#

Who can access Workspace Settings?
Only admin users can open the Workspace Settings area. Non-admin roles will not see the Workspace card on the settings hub or the entry in Spotlight.
Can I share a direct link to a specific tab?
Yes. The active tab is stored in the URL as a query parameter, so you can bookmark or share a link that opens directly on Tags, Custom fields, KB exclusions, Team, Permissions, or Activity.
Why was my tag deletion blocked?
Tags that are still assigned to one or more endpoints cannot be deleted. Remove all assignments first, then delete the tag.
Can the default agent profile be deleted?
No. The default profile is always protected and can never be deleted. Non-default profiles can be deleted only after they are unassigned from all endpoints.
How quickly do KB exclusions take effect on agents?
Active exclusions are delivered to agents through policy updates. Once an agent receives the updated policy, it skips the excluded updates before installation.
Are changes to Workspace Settings logged?
Yes. Every change made in Workspace Settings is recorded in the Activity audit log, including who made the change and when.