# How to disable creating public workspace

**URL:** <https://community.postman.com/t/how-to-disable-creating-public-workspace/61276>\
**Category:** Help Hub\
**Tags:** public-workspace\
**Created:** [May 21, 2024, 7:30am UTC](https://community.postman.com/t/how-to-disable-creating-public-workspace/61276 "2024-05-21T07:30:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![spaceflight-cosmona3](https://avatars.discourse-cdn.com/v4/letter/s/5f9b8f/32.png) [@spaceflight-cosmona3](https://community.postman.com/u/spaceflight-cosmona3)\
**Post date:** [May 21, 2024, 7:30am UTC](https://community.postman.com/t/how-to-disable-creating-public-workspace/61276/1 "2024-05-21T07:30:50Z")

</div>

**How to disable creating public workspace** :

One of my team member created a public workspace and imported a collection having OAuth keys. It is exposed to public and resulted in security breach. As a preventive measure, we would like to disable creating public workspaces.

Could you please let me know if there is an option to prevent users selecting ‘Anyone on the internet’ option during workspace creation.

 ![image](https://us1.discourse-cdn.com/getpostman/original/3X/c/8/c860d167f97175452a2a6547fd34a2926028da6b.png)

Thank you,  
Manoj

---

<div class="post-metadata">

**Author:** ![danny-dainton](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/danny-dainton/32/29401_2.png) [@danny-dainton](https://community.postman.com/u/danny-dainton)\
**Post date:** [May 21, 2024, 7:58am UTC](https://community.postman.com/t/how-to-disable-creating-public-workspace/61276/2 "2024-05-21T07:58:00Z")

</div>

Hey @spaceflight-cosmona3 👋

Welcome to the Postman community :postman:

There are specific roles at the Enterprise tier which control that flow and limit the creation of Public elements to a certain role (Community Manager), this is done via a request visibility change flow which is approved or denied.

> **[Manage public elements in Postman | Postman Learning Center](https://learning.postman.com/docs/collaborating-in-postman/manage-public-elements)**
>
> Postman is a collaboration platform for API development. Postman's features simplify each step of building an API and streamline collaboration so you can create better APIs—faster.

We have various measures and messages, along the way before anyone makes anything public at every tier though.

The screenshot that you shared highlights this but they are also in other place where a Workspace or Collection can be made public.

Once something is made public, you will also received an in-app and email notification from the secret scanner, about any exposed sensitive information. This is something that the team admin would have also seen.

> **[Secret Scanner | Postman Learning Center](https://learning.postman.com/docs/administration/managing-your-team/secret-scanner/)**
>
> Postman is a collaboration platform for API development. Postman's features simplify each step of building an API and streamline collaboration so you can create better APIs—faster.

I would highly recommend making use of the Postman Vault to store sensitive data such as tokens and API Keys, these can be referenced use the Postman variable syntax.

> **[Store secrets in your Postman Vault | Postman Learning Center](https://learning.postman.com/docs/sending-requests/postman-vault/postman-vault-secrets/)**
>
> Postman is a collaboration platform for API development. Postman's features simplify each step of building an API and streamline collaboration so you can create better APIs—faster.

Also, ensure that you use the current value and not the initial value for variables, if these hold sensitive information that you don’t want to be synced.

> **[Store and reuse values using variables | Postman Learning Center](https://learning.postman.com/docs/sending-requests/variables/variables/#initial-and-current-values)**
>
> Postman is a collaboration platform for API development. Postman's features simplify each step of building an API and streamline collaboration so you can create better APIs—faster.

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/system/32/29796_2.png) [@system](https://community.postman.com/u/system)\
**Post date:** [June 20, 2024, 7:58am UTC](https://community.postman.com/t/how-to-disable-creating-public-workspace/61276/3 "2024-06-20T07:58:21Z")

</div>

Closed on June 20, 2024, 7:58am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.