## Giving your customer access to their workspace

A workspace you provision has no people in it. Your customer can be given an
owner login for it, which lets them see their reports, properties and history in
RapidEye directly.

### `POST /v1/workspace-claims?workspace_id=...`

Nominate one email address as the workspace's first owner. Body is
`{ "email": "..." }`. Always answers `202`.

```json
{
  "workspace_id": "ws_123",
  "claim": {
    "state": "pending",
    "email": "ops@sunsetpm.example",
    "expires_at": "2026-09-23T06:00:00Z",
    "email_sent": true,
    "replaced_previous": false
  }
}
```

The rules, because they are narrow on purpose:

- Only for a workspace **you** created, that has no members yet and no owner.
  Anything else is `409 claim_requires_admin`; an already-owned workspace is
  `409 workspace_already_claimed`.
- One live nomination per workspace. Nominating a different address revokes the
  previous one.
- **Exact email only.** No domain matching, ever. The link goes to the address
  you named and nowhere else.
- The response never contains a token. You are nominating a person, not
  obtaining access, which is what stops a partner reading their own API response
  to sign in as their customer.

The person receives an email with a sign-in link. There is also a "Get access to
this workspace" path from the report sign-in page for a customer who reaches a
report before anyone nominated them; that one comes to us for review.