Skip to content

Setting Up Client Workspaces

A client workspace in Seliq is a fully isolated environment for a single client’s security data. Alerts, incidents, integrations, SLA configurations, and reports are all scoped to the workspace. No data crosses workspace boundaries.

  1. Navigate to workspace management

    From the MSSP dashboard, click Workspaces → New workspace.

  2. Configure workspace identity

    • Workspace name — typically your client’s company name (e.g. Acme Corp)
    • Slug — a URL-safe identifier used in the API and internal references (e.g. acme-corp)
    • Timezone — used for SLA calculation windows and report timestamps
    • Primary contact email — the client contact for report delivery (can be changed later)
  3. Set data residency region

    Select the region where this workspace’s data should be stored and processed. Available regions depend on your Seliq plan.

  4. Connect integrations

    Each workspace has its own integration credentials. Connect the client’s SIEM, EDR, or cloud platform as you would for a standalone workspace. See Connecting Your First Integration.

  5. Assign analysts

    Go to the workspace settings → Team. Add analysts by their Seliq account email. Choose a role (Analyst, Admin, Read-only) and assignment type (dedicated, pool, or escalation).

  6. Configure SLAs

    Set the client’s SLA requirements. See SLA Configuration.

Seliq’s workspace isolation is enforced at the data layer, not just the UI. Every database query is scoped to a workspace ID. There is no shared alert or incident store across workspaces.

What is isolated per workspace:

  • All ingested alerts and incidents
  • Integration credentials and configurations
  • SLA rules and timers
  • Report templates and delivery settings
  • Asset inventory
  • Playbooks and suppression rules

What is shared across your MSSP account:

  • Analyst user accounts (one account, multiple workspace assignments)
  • The MSSP dashboard (aggregated view)
  • Billing and plan management

You can give a client read-only access to their own incident queue and report history via the Client Portal. This is separate from a Seliq user account.

  1. Go to the workspace settings → Client Portal
  2. Click Enable Client Portal
  3. Invite the client contact by email — they receive a separate login to a stripped-down view showing only their workspace data