# Applications & workspaces

Understand the selected application, workspace groups, store configurations and the credentials that connect them.

## Application scope

An organization contains applications. Each app owns its own SDK keys, flows, releases, experiments and reporting. Choose a workspace, then the application directly below it in the sidebar. Navigation retains that selection; always check it before editing or exporting.

> **Workspace groups do not transfer data**
> An app may belong to several workspace groups in the same organization. Editing those assignments preserves its IDs, event history, credentials, catalog and organization access.

## Add an application

1. Choose Add app from the application dropdown.
2. Complete the full-page form, including one platform: iOS or Android.
3. Save and copy the one-time SDK key on the destination Apps page.
4. Continue with SDK integration, or add an Apple/Google store configuration in Apps.

## Connect store configurations

Apps lists the Test Store and the selected application's saved store configurations. Add app starts a provider-specific setup. Saving opens the configuration's full page for identifiers, connection state, catalog and credential controls.

| Configuration | What to expect |
| --- | --- |
| Apple App Store | Separate App Store Connect and In-App Purchase keys, validation metadata and catalog access checks. |
| Google Play | Use the Google-specific setup and the status displayed by your configuration; Apple credentials cannot be reused here. |
| Test Store | Catalog testing only. It does not validate purchases or supply a real store entitlement state. |

## Manage SDK keys

Use application Settings → SDK keys to manage the selected app's telemetry credentials. If the one-time value is lost, create a replacement and update the application before revoking the old key. Do not use an SDK key to authorize account administration or payment operations.

## Team permissions

| Role | Access |
| --- | --- |
| Admin | Manage organization collaborators, workspace groups and application writes, subject to owner/self-access protection. |
| Read only | Inspect permitted organization/app data. Cannot edit flows, keys, credentials or catalog. Can change their own account preferences. |

- [Apple key setup](https://aplyna.com/docs/apple-keys): Find the correct key type and identifiers.
- [Security & consent](https://aplyna.com/docs/security): Keep telemetry and store credentials separate.