From f97d861437f7de458c4c5a434c81b22667129665 Mon Sep 17 00:00:00 2001 From: David Xu Date: Sun, 24 Nov 2024 23:13:46 -0800 Subject: [PATCH] clarification for workspaces versus tags for env separation --- docs/administration/concepts/index.mdx | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/administration/concepts/index.mdx b/docs/administration/concepts/index.mdx index 252a87fb..3679553e 100644 --- a/docs/administration/concepts/index.mdx +++ b/docs/administration/concepts/index.mdx @@ -398,3 +398,10 @@ may take a minute or two before the new limits apply. ### Related content - Tutorial on how to [optimize spend](./tutorials/manage_spend) + +## Best Practices + +### Environment separation + +Use resource tags to organize resources by environment (e.g. `dev`, `staging`, `prod`). We will be releasing attribute based access control (ABAC) in the near future, which will enable fine-grained permissions based on resource tags. +We recommend the use of workspaces when you need strict isolation of resources (e.g. different teams who legally cannot see each other's data).