Invite, grant access and import data
The private native-backend Workspace pilot now includes invitation email, provider-managed registration, explicit project access, reviewed imports and an experimental automation API. These are qualified increments, not a production service certification.
Invite and grant access
Section titled “Invite and grant access”Organization owners use Members → Create invitation. The recipient opens the email and signs in with the invited verified address, or chooses Create an account and accept invitation if the configured provider supports registration. If email verification outlasts the sign-in session, reopen the invitation.
Email status distinguishes queued, submitted, failed and cancelled. Submitted means the SMTP server accepted the message; check the recipient inbox/spam folder. Resend after one minute creates a replacement link. Revocation prevents admission, even when an already-sent message arrives later. Links expire after seven days.
Organization membership does not grant project access. A project administrator uses Project access to assign viewer/member permissions and optional compute or administration capabilities. Direct grants can be revoked. Team grants require team administration. Owners can preview remaining access before removing an organization membership; the preview cannot inspect projects they cannot administer.
Archive hides a project from the default list. Restore shows it again. Neither changes data access or deletes scientific records. Deletion, transfer and complete organization-wide offboarding are not claimed by these controls.
Review an import
Section titled “Review an import”- Open a project where you have editing permission, then Import data.
- Select a GeoTIFF surface or a LAS 2.0 curve and enter its explicit mapping.
- Choose Validate and review. Check sample count, nulls, range, units, scientific meaning and original SHA-256. Nothing has been published yet.
- Confirm permission to retain the data and choose Publish reviewed asset. Alternatively, cancel before publication: cancelling discards the review and publishes nothing.
Imports are bounded to 1.5 MB and 100,000 values. GeoTIFF accepts one Float32/64 band with a declared horizontal CRS. It does not infer a vertical datum. LAS imports one chosen channel, requires the declared channel unit to match, and normalizes M/FT measured depths to metres. Enter a stable well identity and an explicit depth reference, including uncertainty. LAS depth does not imply a horizontal CRS. Missing values remain missing. Unsupported or ambiguous mappings are rejected.
The original bytes remain associated with the imported revision. Exact revisions and derived lineage remain distinct. If the connection fails during publication, retry the same file and mapping; the original publication command is reused and recovered, not repeated. GeoTIFF requires a declared horizontal CRS. A derived revision may not have its own original uploaded file—open the imported revision for that export.
Connections and developer tools
Section titled “Connections and developer tools”Connections records intended QGIS consumers and ResInsight publishers of scalar maps. An inventory entry does not start an application. Host status remains unreported until actual host reporting is implemented. Configure credentials on the connector host; follow/pin and reconnect remain application controls. Removing an entry does not stop a producer or revoke its access.
The asset inspector exports credential-free QGIS configuration. Its gateway accepts HTTPS with certificate validation or explicit loopback HTTP through SSH. QGIS still uses its native pilot credential path, not the temporary automation token.
Developer issues a project-scoped credential for the experimental API/CLI. It expires within five minutes and requires its parent session to remain valid. See automation API. Unattended service accounts, OIDC device login and automation project provisioning remain outstanding.
Where OSDU enters
Section titled “Where OSDU enters”OSDU would serve as the selected scientific backend for import, search, exact reads, publication and change recovery. It can enter before a desktop client connects. It does not replace Workspace screens, the identity provider or application-specific connectors. These workflows currently qualify the native project service. OSDU requires separate type/permission/revision qualification; no silent dual authority or OSDU platform fork is introduced.
Project navigation and Connect
Section titled “Project navigation and Connect”The project bar shows authorized organization and project selectors. Connect opens three paths: Add a data source, Connect an application, and Use the API. Opening this panel does not create credentials, select data, or publish a result. Source setup still requires administrator provisioning; see manual source setup. File uploads are snapshots, while configured gateway-readable files can be checked for changes.
Use the section navigation to find:
| Section | Subpages |
|---|---|
| Data | Catalogue, Import data, Review scenes |
| Connections | Data sources, Applications, Connector catalogue |
| Activity | Operations, Source checks, Deliveries, Observation coverage |
| Settings | General, Scientific context, Project access, Lifecycle |
Subpages support direct links, reload and browser Back/Forward. Settings opens at General; scientific defaults are on Scientific context. Personal sign-in security remains at account scope. Project membership does not grant upstream OSDU or SQL access.
Open a connection to discover assets automatically. The connector catalogue shows supported pilot data types, directions and limitations, plus configured source counts for your account. A connector card does not prove that its host application is running. Review configured permissions before relying on publication capability.
Activity, application-binding and project-source tables support search, status filters, sortable headers, optional columns and pagination. Click a name to inspect the record without leaving the table. The data catalogue also supports name/type/ source/revision sorting. Its counts describe datasets; the Wells record view lists individual wells. Icons supplement status text; an operation completing does not establish scientific approval or downstream receipt.
If an asset list fails, use its refresh icon after restoring source access. If a filtered table is empty, clear the search and status filter. Opening or filtering these views does not change the source. Releases, publication destinations and jobs/workflows are separate delivery stages, not enabled by this navigation update.