Setting Up Client Workspaces
A client workspace in Seliq is a fully isolated environment for a single client’s security data. Alerts, incidents, integrations, SLA configurations, and reports are all scoped to the workspace. No data crosses workspace boundaries.
Creating a client workspace
Section titled “Creating a client workspace”-
Navigate to workspace management
From the MSSP dashboard, click Workspaces → New workspace.
-
Configure workspace identity
- Workspace name — typically your client’s company name (e.g.
Acme Corp) - Slug — a URL-safe identifier used in the API and internal references (e.g.
acme-corp) - Timezone — used for SLA calculation windows and report timestamps
- Primary contact email — the client contact for report delivery (can be changed later)
- Workspace name — typically your client’s company name (e.g.
-
Set data residency region
Select the region where this workspace’s data should be stored and processed. Available regions depend on your Seliq plan.
-
Connect integrations
Each workspace has its own integration credentials. Connect the client’s SIEM, EDR, or cloud platform as you would for a standalone workspace. See Connecting Your First Integration.
-
Assign analysts
Go to the workspace settings → Team. Add analysts by their Seliq account email. Choose a role (Analyst, Admin, Read-only) and assignment type (dedicated, pool, or escalation).
-
Configure SLAs
Set the client’s SLA requirements. See SLA Configuration.
Workspace isolation model
Section titled “Workspace isolation model”Seliq’s workspace isolation is enforced at the data layer, not just the UI. Every database query is scoped to a workspace ID. There is no shared alert or incident store across workspaces.
What is isolated per workspace:
- All ingested alerts and incidents
- Integration credentials and configurations
- SLA rules and timers
- Report templates and delivery settings
- Asset inventory
- Playbooks and suppression rules
What is shared across your MSSP account:
- Analyst user accounts (one account, multiple workspace assignments)
- The MSSP dashboard (aggregated view)
- Billing and plan management
Client Portal access
Section titled “Client Portal access”You can give a client read-only access to their own incident queue and report history via the Client Portal. This is separate from a Seliq user account.
- Go to the workspace settings → Client Portal
- Click Enable Client Portal
- Invite the client contact by email — they receive a separate login to a stripped-down view showing only their workspace data