Workspaces and Run as
Two questions explain almost everything in icLens: where is this canister list kept, and who will carry out this action?
Where: workspaces
Section titled “Where: workspaces”A workspace is a list of canisters, with their names, tags and notes. You switch between workspaces at the top of the panel.
| Workspace | Kept in | Good for |
|---|---|---|
| This browser | This device | Your personal list. Works without an Agent. |
| An Agent workspace | Your Agent canister | A list your team shares, with history, alerts and automation. |
The same canister can be in both, with a different name and history in each. A list is only a record: adding a canister never changes it or gives anyone control of it.
Who: Run as
Section titled “Who: Run as”Every change opens a review, and the review asks who runs it:
- You act with your own signed-in identity. You need to control the canister.
- An Agent acts for you. The Agent needs to control the canister, and your role in the Agent must allow the action.
The Agent controls this canister and you are an Admin.
You control this canister.
icLens never switches who runs an action behind your back. If the one you chose can’t do it, the review says why and stops.
Roles in an Agent
Section titled “Roles in an Agent”| Role | Can |
|---|---|
| Read-only | Read the Agent’s list, history, dashboards and alerts. |
| Read-write | Also change the list, run operations and use the AI assistant. |
| Admin | Also manage people, Monitor, funding and the Agent itself. |
A role is about the Agent. It never makes you a controller of a canister: that is set on the canister itself, in Settings and access.