Personal domains and shared domains
OpenIndex distinguishes between two kinds of domains:| Type | Description |
|---|---|
| Personal domain | Automatically created for each user. Identified by the special ME key in the CLI. Use it for personal tasks, drafts, and workflows that aren’t shared with a team. |
| Shared domain | Explicitly created and shared with other users. This is the standard type for team operations. |
oi queue list or oi settings domain workflows list --domain ME, you’re targeting your personal domain.
Domain keys
Each domain has a short alphanumeric key you choose at creation time. The key is used to prefix all work item identifiers in that domain:Membership roles
Domains support four membership roles with different permission levels:Owner
Owner
Full control over the domain, including deleting it. Each domain has exactly one owner. Owners can transfer ownership and manage all members.
Admin
Admin
Can manage domain settings, invite and remove members, configure workflows, and create or delete work items. Cannot delete the domain itself.
Member
Member
Can create and update work items, add comments, and manage their own assignments. Cannot change domain settings or manage other members.
Viewer
Viewer
Read-only access to the domain’s work items and workflows. Cannot create or modify any content.
What you can do in a domain
Manage workflows
Assign workflows to the domain and define the statuses, stages, stage gates, and custom fields that govern work progression.
Create work items
Create projects, tasks, and sub-tasks. All work items are keyed with the domain prefix and tracked in a single canonical model.
Invite members
Add users to the domain with a specific role. Update or revoke membership at any time.
Configure categories
Define domain-scoped labels to organize and filter work items. Categories are applied to individual work items and can be used to group related work.
Domain API
Create a domain
Read and update a domain
Manage members
- API
- CLI
POST /domains/:id/members, provide the user ID and role. Use PATCH to change a member’s role later, and DELETE to remove them.
Categories
Categories are managed on the domain work item:Deletion safety
Domain deletion is a two-step process to prevent accidental data loss:Preview the delete
Call
GET /domains/:id/delete-preview to see what will be removed. The response lists all dependent resources — work items, workflows, members, mailboxes — before any data is touched.