workspace.{table}. It is a
safe projection of control-plane metadata, not a copy in the lake.
Reads see current membership, connector health, and Plot runs.
V1 tables:
Secrets, tokens, sessions, and credential blobs are not in this pool.
A common join is workspace members against a directory tap:
workspace.users.email and provider person-email columns are the same
scalar (Contact.Email), so that join is valid. Person-email columns
are marked x-transformPersonEmail on the tap schema; see
How taps project into tables.
Google Workspace users are at
providers.google.users.
Language-specific Flight SQL clients are on
Querying the lake.