Workspace Settings
A complete guide to the Workspace Settings area: manage tags, custom fields, KB exclusions, team members, role-based permissions, and the activity audit log.
What are Workspace Settings?#
The Workspace Settings area groups all workspace-level administration in one place. It is available only to admin users and is reachable from the General navigation menu, the main Settings hub, and the global Spotlight search.
The page is organized into tabs - Tags, Custom fields, KB exclusions, Team, Permissions, and Activity - so you can jump straight to what you need. The active tab is stored in the URL, which means you can bookmark or share a link that opens on the exact section you want.
How to get there
- 1Open the General menu
In the left navigation sidebar, expand the General section to reveal its sub-items.
- 2Go to Settings
Select Settings from the General menu to open the main settings hub.
- 3Choose Workspace
On the settings hub, open the Workspace card. You can also reach it directly via the global Spotlight search by typing "workspace".
My Moftgate Account & SSO#
Under Settings > Account Settings, the "My Moftgate Account" tab establishes a direct, cryptographically authenticated bridge between your local management console and the centralized My Moftgate Customer Hub.
From this tab, administrators can monitor hardware Machine ID pairing, check real-time cloud synchronization telemetry, and click "Connect to My Moftgate Portal" for instantaneous Single Sign-On without typing passwords or sharing API secrets.
Connecting to Customer Hub
- 1Go to Account Settings > My Moftgate Account
Navigate to Settings > Account Settings and select the "My Moftgate Account" tab.
- 2Verify Connection Status & Machine ID
Review your hardware Machine ID, active license tier, synchronized endpoint count, and live connection health status.
- 3Launch 1-Click Cryptographic SSO
Click "Connect to My Moftgate Portal" to securely transition to the Customer Hub without re-entering credentials.
- 4Manage Entitlements & Support in Customer Hub
Download offline airgap license keys, purchase quota additions, or open direct escalation tickets with the engineering team.
Custom fields#
Custom fields let you capture metadata about your endpoints beyond the built-in attributes. Choose a field type, define the options for select-style fields, and decide where the field applies.
Available field types
| Type | Description |
|---|---|
| Text | Free-form string value |
| Number | Numeric value (integer or decimal) |
| Boolean | True / false toggle |
| Date | Calendar date picker |
| Select | Single choice from a predefined list |
| Multi-select | Multiple choices from a predefined list |
Scoping a custom field
A custom field can apply workspace-wide or be limited to a specific set of endpoints. Scoping keeps metadata relevant and avoids clutter on endpoints where it does not apply.
| Scope | Applies to |
|---|---|
| All endpoints | Applies to every endpoint in the workspace |
| Group | Restricted to endpoints in a specific group |
| Profile | Restricted to endpoints assigned a specific agent profile |
| Tag | Restricted to endpoints carrying a specific tag |
| Endpoint | Restricted to a single named endpoint |
- 1Open the Custom fields tab
Select Custom fields from the Workspace Settings tabs. The tab is stored in the URL for easy sharing.
- 2Create a field
Click the add button, give the field a name, and choose a type (text, number, boolean, date, select, or multi-select). For select types, define the available options.
- 3Choose a scope
Decide where the field applies: all endpoints, a specific group, profile, tag, or a single endpoint. Scoping keeps metadata relevant and avoids clutter.
- 4Save and review
Once saved, the field becomes available to agents and automation actions. Endpoint-scoped values are delivered to agents automatically.
KB exclusions#
KB exclusions let you prevent specific updates from being installed through patch management. This is useful for updates that are known to cause issues in your environment or that must be controlled by another process.
- 1Open the KB exclusions tab
Select KB exclusions from the Workspace Settings tabs.
- 2Add an exclusion
Click the add button and enter the KB or update identifier you want to exclude from patch management.
- 3Choose a target scope
Decide which endpoints the exclusion applies to: all endpoints, a group, a profile, a tag, or a single endpoint.
- 4Save
Active exclusions are delivered to agents automatically. The agent skips the excluded updates before installation, so they are never installed on the targeted endpoints.
Team management#
The Team tab is where you manage the panel user accounts that can sign in to Moftgate. Create new users, update their details, assign roles, and remove users who no longer need access.
- 1Open the Team tab
Select Team from the Workspace Settings tabs to see all panel user accounts.
- 2Invite or create a user
Click the add button to create a new panel user. Provide the required details and assign a role.
- 3Edit a user
Click a user entry to update their details or change their assigned role.
- 4Delete a user
Open the delete action and confirm. A confirmation step prevents accidental removal of team members.
Permissions#
The Permissions tab manages role-based access control. Each role has a set of allowed actions; granting or revoking a permission updates what every user holding that role can do.
- 1Open the Permissions tab
Select Permissions from the Workspace Settings tabs to manage role-based access control.
- 2Review roles
Each role lists the actions it is allowed to perform. Review the current grants before making changes.
- 3Grant or revoke permissions
Toggle or assign permissions for a role. Changes take effect for every panel user holding that role.
- 4Save
Permission updates are audit-logged so you can trace who changed access and when.
Activity log#
The Activity tab is a paginated audit log of every change made in Workspace Settings. Use it to review who did what and when - from tag edits to permission grants and team membership changes.
- Chronological, newest-first record of workspace changes
- Shows the panel user who performed each action
- Covers all tabs: tags, custom fields, KB exclusions, team, and permissions
- Paginated so you can browse long histories without loading everything at once
Deletion guards#
To prevent accidental data loss, Workspace Settings blocks destructive actions that would leave dangling references. The table below summarizes what is protected and how to proceed.
| Entity | Rule | How to proceed |
|---|---|---|
| Tags | A tag assigned to one or more endpoints cannot be deleted. | Remove all assignments first, then delete. The tag and its assignments are preserved until then. |
| Profiles | An agent profile still assigned to endpoints cannot be deleted. The default profile is always protected. | Unassign the profile from all endpoints first. The default profile can never be deleted under any circumstance. |