Workspace access controls for invitations, domain signup and departures