Systems and methods for managing subordinate workspaces

1 . An Information Handling System (IHS) comprising:

a processor; and

a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the processor to:

receive a primary workspace definition from a remote orchestrator;

instantiate a primary workspace based upon the primary workspace definition, wherein the instantiated primary workspace provides access to a protected resource;

identify an inventory of one or more peripheral devices that are coupled to the IHS;

report the inventory of peripheral devices to the remote orchestrator;

identify one or more subordinate workspaces operated by the peripheral devices that are coupled to the IHS, wherein each subordinate workspace supports one or more roles of authorized operations by a respective peripheral device;

select one or more of the subordinate workspaces for use by the primary workspace based on the roles supported by the subordinate workspaces; and

restrict access, via the one or more roles, to protected data by a respective peripheral device;

wherein the one or more roles correspond to specific functions of a first of the reported peripheral devices that are available for use by the primary workspace; and

wherein a first of the peripheral devices coupled to the IHS comprises an external camera and wherein the one or more roles comprise a video-capture role that limits the external camera to providing captured video to the primary workspace.

2 . The IHS of claim 1 , wherein the primary workspace is instantiated to operate using one or more CPUs and system memory of the IHS.

3 . The IHS of claim 2 , wherein, upon being initiated, each of the subordinate workspaces are instantiated for operation using logic and memory resources of a respective peripheral device.

4 . The IHS of claim 1 wherein execution of the program instructions further causes the processor to:

receive a subordinate workspace definition from the remote orchestrator, wherein the subordinate workspace definition specifies one or more roles supported by the first of the reported peripheral devices; and

instantiate a subordinate workspace on the first of the reported peripheral devices based on the received subordinate workspace definition, wherein the subordinate workspace supports the one or more roles from the subordinate workspace definition.

5 . The IHS of claim 1 , wherein the one or more roles specify supported communications between the primary workspace and the subordinate workspace.

6 . The IHS of claim 5 , wherein the allowed communications are specified by an API of supported communications between the primary workspace and the subordinate workspace.

7 . The IHS of claim 1 , wherein the one or more roles further comprise a video-storage role that authorizes the external camera to store captured video to a cloud storage.

8 . The IHS of claim 1 , wherein the primary workspace definition specifies a grouping of roles supported by the primary workspace.

9 . The IHS of claim 8 , wherein the grouping of roles comprise a point-of-sale role grouping and wherein the roles of one or more of the subordinate workspaces support point-of-sale functions.

10 . The IHS of claim 8 , wherein a first of the peripheral devices coupled to the IHS comprises a credit card reader and a subordinate workspace operating on the credit card reader supports a point-of-sale role.

11 . The IHS of claim 8 , wherein a first of the peripheral devices coupled to the IHS is configured to scan product codes and a subordinate workspace operating on the code scanner supports a point-of-sale role.

12 . A method for supporting workspaces on an Information Handling System (IHS), the method comprising:

receiving a primary workspace definition from a remote orchestrator;

instantiating a primary workspace based upon the primary workspace definition, wherein the instantiated primary workspace provides access to a protected resource;

identifying an inventory of one or more peripheral devices that are coupled to the IHS; reporting the inventory of peripheral devices to the remote orchestrator;

identifying one or more subordinate workspaces operated by the peripheral devices that are coupled to the IHS, wherein each subordinate workspace supports one or more roles of authorized operations by a respective peripheral device;

selecting one or more of the subordinate workspaces for use by the primary workspace based on the roles supported by the subordinate workspaces; and

restricting access, via the one or more roles, to protected data by a respective peripheral device;

wherein the one or more roles correspond to specific functions of a first of the reported peripheral devices that are available for use by the primary workspace; and

wherein a first of the peripheral devices coupled to the IHS comprises an external camera and wherein the one or more roles comprise a video-capture role that limits the external camera to providing captured video to the primary workspace.

13 . The method of claim 12 , wherein the one or more roles specify supported communications between the primary workspace and the subordinate workspace.

14 . The method of claim 12 , wherein the primary workspace definition specifies a grouping of roles supported by the primary workspace.

15 . A memory storage device having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

receive a primary workspace definition from a remote orchestrator;

instantiate a primary workspace based upon the primary workspace definition, wherein the instantiated primary workspace provides access to a protected resource;

identify an inventory of one or more peripheral devices that are coupled to the IHS; report the inventory of peripheral devices to the remote orchestrator;

identify one or more subordinate workspaces operated by the peripheral devices that are coupled to the IHS, wherein each subordinate workspace supports one or more roles of authorized operations by a respective peripheral device;

select one or more of the subordinate workspaces for use by the primary workspace based on the roles supported by the subordinate workspaces; and

restrict access, via the one or more roles, to protected data by a respective peripheral device;

wherein the one or more roles correspond to specific functions of a first of the reported peripheral devices that are available for use by the primary workspace; and

wherein a first of the peripheral devices coupled to the IHS comprises an external camera and wherein the one or more roles comprise a video-capture role that limits the external camera to providing captured video to the primary workspace.