In the Nyota Imara ecosystem, every API key, storage bucket, email mailbox, and SMS credit is scoped to an isolated container called a Workspace.
When you register an account at accounts.nyotaimara.com, our system automatically creates a Personal Workspace for you. To collaborate with a team, share billing budgets, or deploy enterprise infrastructure, you can create one or more Business Workspaces.
1. How Workspaces Work Under the Hood
Everything in the Nyota backend database references a strict workspace_id. Even though you log in with a single personal email address (via our Single Sign-On Identity Provider), your data, billing ledgers, and API credentials are cryptographically isolated between workspaces.
YOUR USER ACCOUNT (user@yourcompany.com)
│
┌───────────────────────┴───────────────────────┐
▼ ▼
┌───────────────────────────────┐ ┌───────────────────────────────┐
│ PERSONAL WORKSPACE │ │ BUSINESS WORKSPACE │
│ - Single-user sandbox │ │ - Multi-user collaboration │
│ - Personal testing & storage │ │ - Organizational Units (OUs) │
│ - Individual wallet balance │ │ - Corporate Nyota Wallet │
│ - No team member invites │ │ - Declarative PBAC Policies │
└───────────────────────────────┘ └───────────────────────────────┘2. Feature Comparison: Personal vs. Business
Capability | Personal Workspace | Business Workspace |
Target User | Solo developers, individual testers | Companies, startups, SACCOs, agencies |
Team Member Invitations | Disabled (Single-user only) | Unlimited employee/collaborator invites |
Access Control Model | Standard Owner access | Granular Policy-Based Access Control (PBAC) |
Organizational Units (OUs) | Not supported | Hierarchical department trees ( |
3. Common Pitfalls & Why Issues Occur
Pitfall A: "I can't find the 'Invite Member' button in my settings."
- The Cause: You are currently active inside your Personal Workspace. Personal workspaces are designed strictly for solo use and do not support member invitations.
- The Resolution:
- Click your workspace name in the top-left corner of accounts.nyotaimara.com.
- Switch to an existing Business Workspace, or click "Create Business Workspace".
- Navigate to Team Members to send email invites.
Pitfall B: "My API calls return 402 Payment Required, but my company wallet is funded."
- The Cause: You generated your Developer API Key while viewing your Personal Workspace instead of your Business Workspace. The API key is attempting to draw funds from your personal wallet balance (which is KES 0.00) rather than your funded company wallet.
- The Resolution:
- Go to accounts.nyotaimara.com and switch to your Business Workspace in the header.
- Navigate to Identity API & Keys (
/identity-api). - Generate a new API key scoped to the Business Workspace.
- Update your application's environment variable (
NYOTA_API_KEY).
4. Step-by-Step: How to Create a Business Workspace
- Log in to the Nyota Accounts Console.
- Click on your active workspace dropdown in the top-left navigation bar.
- Select "Create New Workspace".
- Enter your legal business name and select your country of operation (e.g., Kenya).
- Optionally upload your corporate KRA PIN certificate for automated KYB verification.
- Click "Create Workspace".
Once created, you can invite team members, assign department-level Organizational Units (OUs), pre-fund the corporate Nyota Wallet via M-Pesa or Card, and provision shared infrastructure.