How to Manage Administrative Access to Spaces

Spaces owners can create, destroy, and read all content in all the Spaces for an account. They also make decisions and manage what everyone else can see. If an owner wants to allow one or more people to co-manage Spaces, there are two options: access keys and DigitalOcean Teams.

  • Access keys allow people or programs to connect to Spaces with third-party clients and the API, but do not provide access to the control panel or other DigitalOcean resources.
  • DigitalOcean Teams allow Members to use the control panel, including creating and managing Spaces and Spaces access keys as well as other DigitalOcean resources (like billing information, Droplets, and more).

Sharing Access to Spaces with Access Keys

Users who connect with access keys can create, destroy, read, and write to all of the Spaces for the account. However, the privileges granted by Spaces access keys do not provide access to the control panel and do not extend to other DigitalOcean resources.

You can create an unlimited number of keys for your account. This allows you to generate unique key pairs for each person or program, so if it’s necessary to revoke access in the future, you can remove the keys or reset the secret without affecting other users.

To generate Spaces access keys, use the main navigation bar and follow the API link.

API page

Within the Spaces access keys section, select Generate New Key. In the modal that opens, provide a Key name that will allow you to identify who or what uses the key, then click Generate Key.

Screenshot of the Key name dialog

The name of the key will be displayed opposite the access key, and the secret key will be displayed underneath. This is the only time the secret key will be displayed, so copy it immediately and store it in a secure place.

Screenshot of new key pair

If a secret gets lost, forgotten, or compromised, you can open its More menu, click Edit and choose Regenerate Token to create a new secret. When you regenerate a secret, any scripts or clients that use the key will need to be reconfigured to use the new secret value.

Sharing Access to the Control Panel with Teams

DigitalOcean Teams, like Spaces access keys, allow members to create, manage, and destroy Spaces associated with the Team account using the control panel’s web interface. Members can also create, delete, and regenerate access keys for Spaces.

However, unlike Spaces access keys, Members of a Team can also access other Team resources, like Droplets, Firewalls, and more.

Because Spaces cannot be transferred directly between accounts, we recommend you create the Team first, then create the Spaces.

To give one or more people access to co-manage Spaces using the control panel, open the User menu and choose Create a team, then follow the setup steps.

Once a user is a Member of the Team, they can manage Spaces with the web interface as well as generate their own keys for API or third-party clients.