diff --git a/opensearch_dashboards.json b/opensearch_dashboards.json
index 994096906..af9f06ade 100644
--- a/opensearch_dashboards.json
+++ b/opensearch_dashboards.json
@@ -10,7 +10,8 @@
     "savedObjectsManagement"
   ],
   "optionalPlugins": [
-    "managementOverview"
+    "managementOverview",
+    "workspace"
   ],
   "server": true,
   "ui": true
diff --git a/public/apps/configuration/panels/tenant-list/configure_tab1.tsx b/public/apps/configuration/panels/tenant-list/configure_tab1.tsx
index dd8686664..2454e079d 100644
--- a/public/apps/configuration/panels/tenant-list/configure_tab1.tsx
+++ b/public/apps/configuration/panels/tenant-list/configure_tab1.tsx
@@ -98,6 +98,14 @@ export function ConfigureTab1(props: AppDependencies) {
         handleSave={async (updatedConfiguration1: TenancyConfigSettings) => {
           try {
             console.log('Calling API');
+            if (
+              updatedConfiguration1.multitenancy_enabled &&
+              props.coreStart.application.capabilities.workspaces.enabled
+            ) {
+              throw new Error(
+                'Multi-tenancy is not allowed to enable as workspace is enabled, you can disable workspace and retry.'
+              );
+            }
             await updateTenancyConfiguration(props.coreStart.http, updatedConfiguration1);
             setSaveChangesModal(null);
             setChangeInMultiTenancyOption(0);
@@ -349,6 +357,7 @@ export function ConfigureTab1(props: AppDependencies) {
                 label={'Enabled'}
                 checked={updatedConfiguration.multitenancy_enabled}
                 onChange={() => onSwitchChangeTenancyEnabled()}
+                disabled={props.coreStart.application.capabilities.workspaces.enabled}
               />
             </EuiDescribedFormGroup>
           </EuiPageContentHeaderSection>
diff --git a/server/plugin.ts b/server/plugin.ts
index 5f5f50913..e48f96802 100644
--- a/server/plugin.ts
+++ b/server/plugin.ts
@@ -15,6 +15,7 @@
 
 import { first } from 'rxjs/operators';
 import { Observable } from 'rxjs';
+import { CriticalError } from '../../../src/core/server/errors';
 import {
   PluginInitializerContext,
   CoreSetup,
@@ -46,6 +47,7 @@ import { createMigrationOpenSearchClient } from '../../../src/core/server/saved_
 import { SecuritySavedObjectsClientWrapper } from './saved_objects/saved_objects_wrapper';
 import { addTenantParameterToResolvedShortLink } from './multitenancy/tenant_resolver';
 import { ReadonlyService } from './readonly/readonly_service';
+import { WorkspacePluginSetup } from '../../../src/plugins/workspace/server';
 
 export interface SecurityPluginRequestContext {
   logger: Logger;
@@ -68,7 +70,12 @@ declare module 'opensearch-dashboards/server' {
   }
 }
 
-export class SecurityPlugin implements Plugin<SecurityPluginSetup, SecurityPluginStart> {
+interface SecurityPluginSetupDeps {
+  workspace: WorkspacePluginSetup;
+}
+
+export class SecurityPlugin
+  implements Plugin<SecurityPluginSetup, SecurityPluginStart, SecurityPluginSetupDeps> {
   private readonly logger: Logger;
   // FIXME: keep an reference of admin client so that it can be used in start(), better to figureout a
   //        decent way to get adminClient in start. (maybe using getStartServices() from setup?)
@@ -83,7 +90,7 @@ export class SecurityPlugin implements Plugin<SecurityPluginSetup, SecurityPlugi
     this.savedObjectClientWrapper = new SecuritySavedObjectsClientWrapper();
   }
 
-  public async setup(core: CoreSetup) {
+  public async setup(core: CoreSetup, { workspace }: SecurityPluginSetupDeps) {
     this.logger.debug('opendistro_security: Setup');
 
     const config$ = this.initializerContext.config.create<SecurityPluginConfigType>();
@@ -136,6 +143,18 @@ export class SecurityPlugin implements Plugin<SecurityPluginSetup, SecurityPlugi
     defineRoutes(router);
     defineAuthTypeRoutes(router, config);
 
+    // multitenancyinfo is application level
+    const dashboardsInfo = await esClient.callAsInternalUser(
+      'opensearch_security.multitenancyinfo'
+    );
+
+    if (workspace && config.multitenancy?.enabled && dashboardsInfo.multitenancy_enabled) {
+      const message =
+        'Both workspace and multi-tenancy features are enabled, only one of them can be enabled at the same time.';
+      this.logger.error(message);
+      throw new CriticalError(message, 'InvalidConfig', 64);
+    }
+
     // set up multi-tenant routes
     if (config.multitenancy?.enabled) {
       setupMultitenantRoutes(router, securitySessionStorageFactory, this.securityClient);