Application Management

The Application Management module is used to install, create, and manage applications in your space. It supports GeniApps installed from the App Marketplace, embedded agents, external/SSO integrations, Workbench applications, and containerized applications.

Access Path

Log in to the console and click Applications in the left navigation bar to enter the Application Management page.

info

Viewing the Applications module requires the space.application.read permission. Managing application members and roles requires the space.application.admin permission.

Feature Overview

The Application Management page includes the following tabs:

Tab	Description
My Applications	Applications installed or created in the current space
App Marketplace	Platform GeniApps you can install into your space (SaaS only)

Views and Filtering

• View Mode: Toggle between grid view and list view
• Search: Quickly search by application name
• Category Filter: Filter the catalog by category

Application Types

Type	Description
GeniApp (GENIAPP)	Platform-built apps (HR, inventory, project, short drama, etc.) installed from the App Marketplace. They run in an iframe inside the Shell and use your space's data and roles.
Embedded Agent (EMBEDDED_AGENT)	An agent embedded into the Shell or Console
External / SSO (EXTERNAL)	A third-party application integrated via single sign-on
Workbench (WORKBENCH)	A low-code application built in Workbench
Containerized App (CONTAINERIZED)	An application deployed from a Docker image

note

Legacy type names are mapped automatically: LOWCODE → Workbench, SSO → External, PLATFORM_BUILTIN → GeniApp.

Installing GeniApps from the Marketplace

1. Open Applications → App Marketplace
2. Browse or search for a GeniApp (for example HR, Stock, or Project)
3. Click Install; you can optionally choose to include demo data
4. After installation, open the app from the Shell sidebar or pinned navigation

Installed GeniApps run in an iframe inside the Shell and reuse your space's data and role assignments. The member who installs the app is automatically added as an admin.

tip

The App Marketplace is available in the SaaS version. In self-hosted deployments, the Marketplace tab is not shown.

Creating a Custom Application

1. Click Create Application on the application list page
2. Fill in the basic application information:
   • Name: Application display name
   • Identifier: Unique application identifier, used in URLs and API calls
   • Description: Application functionality description
   • Type: Select Embedded Agent, External / SSO, Workbench, or Containerized
3. Configure additional information based on the application type (for example, the SSO endpoint or the Docker image)
4. Confirm creation

Application Details

Click an application card to enter the details page. The available tabs depend on the application type.

GeniApps (installed from the Marketplace)

Installed GeniApps show three tabs:

Tab	Description
Overview	Application summary, status, and installation information
Users	Manage which space members can access the app and assign roles
Permissions	Manage roles and view the permission catalog

Custom applications

Custom applications show Overview and Settings, plus tabs that depend on the type:

• SSO Configuration — for External / SSO applications (or any app with an SSO config)
• Embed — for Embedded Agent applications
• GeniApp — GeniApp-specific configuration for custom GeniApp-type applications
• Users and Permissions — only for Workbench applications

Overview

Displays the application summary, status, and key information.

Settings

Edit application configuration, including basic information (name, description, identifier). Containerized applications additionally expose Docker image and resource configuration.

SSO Configuration

Configure single sign-on parameters for External / SSO applications.

Application Members & Roles

GeniApps and Workbench applications use a per-application access and role system, managed from the Users and Permissions tabs. All management actions require the space.application.admin permission.

Users tab — application access

The Users tab controls which space members can use the application:

• Add a space member to grant access, and assign one or more application roles. The member must be an active member of the application's space.
• Application access is a whitelist. As soon as any member is added, only those members (plus space admins) can access the app — including yourself, if you are not on the list. When no members have been added, everyone in the space can access the app.
• The member who installs a GeniApp is added automatically as admin at install time and does not appear in the add list.
• Removing a member revokes their access and role assignments.

For Workbench applications, roles are optional when adding a member: a member can be added for access only, or with a role that the app uses to gate in-app operations.

Permissions tab — roles & permissions

The Permissions tab manages the application's roles and shows the permission catalog:

• Roles and permissions are sourced from each application's rbac.json contract, which is synchronized when the app is installed and upgraded.
• System roles (defined in the contract) are read-only in the Console. To change them, edit the app's rbac.json and upgrade the application.
• Administrators can create, edit, and delete custom roles, choosing permissions from the synced catalog. A custom role code must start with a lowercase letter and contain only lowercase letters, numbers, and underscores (pattern ^[a-z][a-z0-9_]*$).
• A role that is still assigned to one or more members cannot be deleted until those members are reassigned.

note

Roles are defined per application by its contract — there is no fixed global set of roles. Names such as admin, viewer, member, and owner are common conventions that map to display icons, not a required list.

Application Status

Status	Description
DRAFT	Draft
SUBMITTED	Submitted for review
PUBLISHED	Published
SUSPENDED	Suspended
ARCHIVED	Archived

Access Control

Visibility	Description
PUBLIC	Visible to all users
PRIVATE	Visible only to the creator
Space	Visible within the current space (see Space Management)

Related Documentation

• Applications Overview — Platform sub-application descriptions
• Space Management — Collaboration spaces and members
• Dashboard — Console home page
• Billing & Subscription — Subscriptions and plans