---
last_updated: "2026-10-23T11:27:28.000Z"
title: "Share Explorations with your Workspace"
excerpt: "Explorations can now be shared with everyone in your Workspace. Also: a Workspace filter on Organization Observability, Tinybird CLI 5.0.3, permission changes for viewers and guests, plus improvements and bug fixes."
date: "2026-10-23"
---

# Share Explorations with your Workspace

Explorations used to stay private to whoever created them. Now you can share an Exploration with your whole Workspace from the Share control next to its title, the same way you share Playgrounds and Time Series. Only the owner can change who it's shared with.

The Explorations sidebar also has Favorites, Private and Workspace tabs, so you can find your own Explorations, the ones your team shared, and the ones you use most. Add or remove a favorite from an Exploration's menu.

## Filter Organization Observability by Workspace

The Organization Observability page now has a Workspace selector in the header. Pick one or more Workspaces and every chart and the resource table show only their data, so you can find which Workspace is driving requests, ingestion, storage or errors. Charts based on organization-level data, which has no Workspace breakdown, stay unfiltered.

## Breaking changes

- **Viewers can no longer change Workspace secrets**: Creating, updating or deleting secrets with `POST /v0/variables`, `PUT /v0/variables/<name>` or `DELETE /v0/variables/<name>` now returns a 403 for members with the viewer role. Viewers can still list and read them. Use a member with write access or a Workspace `ADMIN` Token to manage secrets.
- **Only admins can create, promote or delete Classic Releases**: Guests now get a 403 when they create, promote or delete a Classic Release from the UI or with their own user Token. Workspace `ADMIN` Tokens used in CLI and CI workflows keep working.

## Improvements and bug fixes

- [CLI]: Removed trust in the compromised eMudhra intermediate certificate authorities in Tinybird CLI 5.0.3 for Forward. Update the CLI to get the fix.
- [All]: Fixed the SQL formatter in the UI and `tb fmt` (CLI 5.0.2 and later) splitting ClickHouse® numeric literals such as `1e9`, `0x1F`, `0b101` and `1_000_000`, so a query that ran before formatting still runs after it.
- [All]: Changed the Tinybird MCP server to return a 401 when a request has no Token or an invalid one, so MCP clients ask you to authenticate instead of showing an empty tool list.
- [All]: Improved how the DynamoDB connector reads lagging stream shards, so busy tables catch up sooner.
- [All]: Added a warning in `kafka_ops_log` when a Kafka connector's consumers have no partitions assigned, for example because the topic was deleted. It tells you to check that the topic exists in your Kafka cluster.
- [All]: Added the number of removed rows to `delete_data` entries in `datasources_ops_log`.
- [All]: Fixed removed Organization members keeping Token access to its Workspaces for a while. Access is now revoked right away.
- [All]: Removed the other Workspace's resource names from errors caused by a Materialized View in a Workspace you shared a Data Source with.
- [All]: Fixed unchecking a filtered read scope in the Token editor when the filter contains `:`, such as a timestamp or a `::String` cast.
- [All]: Improved the credits usage chart in Plan & Billing: every series now has its own color, and the Purchased label sits at the right end of its line.
- [Forward]: Fixed the rollback of already altered Data Sources when a deployment fails while going live. The error now shows the real cause.
- [Forward]: Removed the sidebar toggle that did nothing in the split screen Time Series panel.
- [Classic]: Fixed Branch creation failing for Classic Workspaces with many Tokens.