Help Center/ SecMaster/ User Guide/ Workspaces/ Workspace Agencies/ Creating a Workspace Agency
Updated on 2025-07-31 GMT+08:00
View PDF

Creating a Workspace Agency

Workspace Agency Overview

A workspace agency can help improve security operations efficiency without requiring additional personnel. With a workspace agency, you can:

  • Manage multiple workspaces centrally.
  • View asset risks, alerts, and incidents in one place.
  • Enable cross-account security operations.

For details about workspace agencies, see Table 1.

Table 1 Unified management functions supported by workspace agencies

Function

Feature

Description

Centralized security operations

Situation Overview

This area shows the security evaluation results from multiple workspaces managed by the workspace agency view.

For more details, see Checking the Situation Overview.

Large Screen

Security data from multiple workspaces can be displayed and managed on one large screen. For details, see Overall Situation Screen and Monitoring Statistics Screen.

Security Reports

This area displays all security reports of workspaces managed by the agency view. You can view the security reports by workspace. The name of the workspace a security report belongs to is displayed next to the security report name.

For more details, see Viewing a Security Report.

Unified asset management

Resource Manager

This area displays all assets of workspaces managed by the agency view. Assets are managed centrally. You can identify the workspace an asset belongs to based on the Workspace Name column in the asset list.

For more details, see Overview.

Unified risk prevention

Baseline Inspection

You can aggregate the baseline check results from multiple workspaces into an agency view for centralized management. For more details, see Viewing Baseline Check Results, Starting an Immediate Baseline Check, and Check Result Feedback. You can identify the workspace a check item belongs to based on the Workspace Name column in the check result list.

Vulnerabilities

You can aggregate vulnerability information from workspaces managed by the agency view and view them centrally. For more details, see Overview. You can identify the workspace to which a vulnerability belongs based on the Workspace Name column of the vulnerability.

Security Policies

You can aggregate security policies from multiple workspaces into an agency view for centralized management. For more details, see Adding a Security Policy and Managing Security Policies. On the Risk Prevention > Security Policies page of the workspace agency view, you can identify the workspace a security policy belongs to based on the Workspace Name column in the security policy list.

Unified threat operations

Incidents

You can aggregate incidents from multiple workspaces into an agency view for centralized management. For more details, see Viewing Incidents, Adding and Editing an Incident, and Closing and Deleting an Incident. On the Threat Operations > Incidents page in the workspace agency view, you can identify the workspace an incident belongs to based on the Workspace Name column in the incident list.

Alerts

You can aggregate alerts from multiple workspaces into an agency view for centralized management. For more details, see Viewing Alert Details, Converting an Alert into an Incident or Associating an Alert with an Incident, Closing and Deleting an Alert, Adding and Editing an Alert, and one-click blocking or unblocking. On the Threat Operations > Alerts page in the workspace agency view, you can identify the workspace an alert belongs to based on the Workspace Name column in the alert list.

Indicators

You can aggregate indicators from multiple workspaces into an agency view for centralized management. For more details, see Viewing Indicators and Adding and Editing an Indicator. On the Threat Operations > Indicators page in the workspace agency view, you can identify the workspace an indicator belongs to based on the Workspace Name column in the indicator list.

Intelligent Modeling

You can view and manage resources by workspace.

Viewing Model Templates, Creating and Editing a Model, Viewing a Model, and Managing Models are supported.

Security Analysis

You can view and manage data spaces by workspace.

For more details, see Overview.

Security Orchestration

Playbooks

You can view and manage playbooks by workspace.

For details, see Overview.

Layouts

You can view and manage layouts by workspace.

For more details, see Viewing Layouts and Viewing a Layout Template.

Plugins

You can view and manage plugins by workspace.

For details, see Viewing Plug-in Details.

Data Integration

Data Integration

You can view and manage log data by workspace.

For more details, see Cloud Service Log Access Supported by SecMaster and Enabling Log Access.

Workspace Hosting Process

The process of hosting a workspace is as follows.

Table 2 Workspace hosting process

Procedure

Description

Step 1: Create an Agency View

You need to create an agency view to manage the delegation that other users give you for workspace hosting.

Step 2: Create an Agency

You can create agencies to authorize other users to manage your workspaces in a project. In this way, asset risks, alerts, and incidents across workspaces can be centrally managed for security operations.

Step 3: Authorize an Agency

You need to grant permission to other users to manage your workspaces and they need to accept your delegation to attach your workspaces to their workspaces.

  1. After you create an agency, authorize the user you specified in the agency to manage your workspaces.
  2. Choose Workspaces > Agencies > Workspaces Managed by Me and accept workspaces that need to be managed by you centrally.

The accepted workspaces will be attached to your workspaces.

Limitations and Constraints

  • The specifications of the workspace agency views and the number of workspaces are as follows:
    • Constraints on workspace agency views: Only one workspace agency view can be created in a region for an account.
    • Constraints on managed workspaces:
      • Single-region scenario: A maximum of 100 workspaces can be managed by a workspace agency view.
      • Cross-region scenario: A maximum of 10 workspaces can be managed by a workspace agency view.
      • If you want to use one agency view to manage workspaces in excessive of the limit, submit a service ticket to apply for capacity expansion.
    • Restrictions: A maximum of 10 agencies can be created by an account.

Step 1: Create an Agency View

  1. Log in to the SecMaster console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
  4. In the navigation pane on the left, choose Workspaces > Agencies.

    Figure 1 Agencies

  5. On the Agency Views tab, click Create Agency View. The Create Agency View slide-out panel is displayed.
  6. Configure parameters required for creating the agency view.

    Table 3 Parameters for creating an agency view

    Parameter

    Description

    Agency View Name

    Name of the agency view. Configuration constraints:

    • Only letters (A to Z and a to z), numbers (0 to 9), and the following special characters are allowed: -_()
    • A maximum of 64 characters are allowed.

    Workspace Name

    The workspace you want to associate with the agency view. The workspace you associate is the main workspace.

    (Optional) Description

    Description of the agency view. Enter a maximum of 512 characters.

  7. Click OK.

    The created agency view will be displayed on the Agency Views tab.

Step 2: Create an Agency

  1. On the Agencies page, click Create Agency in the upper right corner of the page.
  2. On the Create Agency slide-out is displayed, configure agency parameters.

    Table 4 Parameters for creating an agency

    Parameter

    Description

    Initiated By

    Agency creator.

    Agency Created By

    Workspace

    A workspace to be managed by this agency.

    Agency Accepted By

    Account

    Account name of the user who delegate the management permission to this agency. You can also enter the current account as the agency account, or obtain the account name as follows:

    1. Log in to the management console, hover the mouse over the username in the upper right corner, and select My Credentials from the drop-down list. The API Credentials page is displayed by default.
    2. On the API Credentials page, obtain the Account Name.
      Figure 2 Account Name

    Agency View

    An existing agency view.

    Agency Details

    Agency Name

    Name of the agency. Configuration constraints:

    • Only letters (A to Z and a to z), numbers (0 to 9), and the following special characters are allowed: -_()
    • A maximum of 64 characters are allowed.

    Agency Duration

    Select an agency duration.

    Agency Policy

    Agency permission policy.

    You can query the meaning of a policy in IAM. To view the meaning, perform the following steps:

    1. Log in to the management console, hover the mouse over the username in the upper right corner, and select Identity and Access Management from the drop-down list. The IAM users page is displayed.
    2. In the navigation pane on the left, choose Permissions > Policies/Roles. On the Policies page, enter the policy name in the search box.

      View the meaning and scope of the policy.

    Description

    Description of the agency. Enter a maximum of 512 characters.

  3. Click Confirm.

Step 3: Authorize an Agency

  1. On the Agencies page, click the Workspaces Managed by Me tab. In the row containing the workspace you want to manage, click Accept in the Operation column.

    If the system displays a message indicating that you are not authorized when you try to accept an agency, get authorization by referring to Authorizing SecMaster first.

  2. In the displayed dialog box, click OK.

Follow-up Operations

Choose Workspaces > Management, click the name of the created agency view. You can view details about workspaces managed in the agency view.

Related Operations

  • Editing an agency view
    1. Locate the row that contains the agency view, and click Edit in the Operation column.
    2. On the Edit Agency View slide-out panel, modify the parameters and click OK.
  • Deleting an agency view
    You can delete an agency view if you need to delete the agency workspace and agency information.
    1. Locate the row that contains the agency view, and click Delete in the Operation column.
    2. In the displayed dialog box, click OK.
Parent topic: Workspace Agencies