>
    Strata Copilot
    Workspace Availability by Page
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Workspaces Overview
    6. Workspace Availability by Page
    Next‑Gen Trust Security

    Workspace Availability by Page

    Table of Contents

    Workspace Availability by Page

    Most pages work the same way in every workspace and show you that workspace's resources. Nine pages are the exception: they configure the tenant as a whole, so they are available only when Tenant is selected.

    Pages Available Only Under Tenant

    When you select any workspace other than Tenant, these pages disappear from the menu, and their URLs stop resolving. Bookmarks and saved links to them return a "not found" page until you switch back to Tenant.
    PageMenu location
    Trusted CA CertificatesInsights > Certificate Inventory
    Network DiscoveryConfiguration > Certificate Configuration
    Certificate TagsConfiguration > Certificate Configuration
    Approval RulesConfiguration > Certificate Policies
    Certificate LifecycleConfiguration > Certificate Policies
    Certificate AuthoritiesConfiguration > Certificate Integrations
    Notification ProvidersConfiguration > Certificate Notifications
    Notification BrandingConfiguration > Certificate Notifications
    Notification TemplatesConfiguration > Certificate Notifications
    The configuration these pages hold still applies inside every workspace. A certificate tag defined under Tenant can still be used on a certificate in a workspace; you just cannot manage the list of tags without switching back.
    Everything else keeps its menu entry in every workspace and shows the selected workspace's resources.

    This Is Not a Security Control

    Do not use workspaces to keep users away from a page. The nine pages above are hidden from a workspace because they have nothing tenant-specific to show there, not because the workspace is a boundary. A user who can reach Tenant can reach all nine, and workspace selection is a preference the user sets for themselves.
    To control which pages a user can open, create a custom role and assign it. That is the supported mechanism, and it holds regardless of which workspace the user has selected.

    © 2026 Palo Alto Networks, Inc. All rights reserved.