- [ ] establish possibility to list all workspaces via API (in addition to create/delete) - [ ] properly authorize all API endpoints (workspace admin) - [ ] provide UI elements for authorized users to use these API capabilities