Organization Introduction
Learn about Organization management - hierarchical organizations, users, groups, roles, and permissions
Organization
Organization management enables you to structure your system with hierarchical organizations, manage users, groups, roles, and permissions. This provides a comprehensive access control and multi-tenancy system.
What is Organization Management?
Organization management enables you to:
- Create Hierarchical Organizations: Build parent-child organization structures
- Manage Users: Create and manage users across multiple organizations
- Organize with Groups: Create groups to organize users
- Define Roles: Create roles with specific permissions
- Control Access: Manage permissions through roles and groups
- Multi-Tenancy: Support multiple organizations in a single system
Key Concepts
Organizations
Organizations are hierarchical entities that represent companies, departments, or business units:
- Hierarchical Structure: Organizations can have parent-child relationships
- Root Organizations: Top-level organizations without parents
- Child Organizations: Sub-organizations that belong to parent organizations
- Organization Tree: Visual representation of organization hierarchy
Users
Users are individuals who access the system:
- Multiple Organizations: Users can belong to multiple organizations
- Primary Organization: One organization is designated as primary
- User Roles: Users can have direct role assignments
- Group Membership: Users can belong to groups
Groups
Groups are collections of users within an organization:
- Hierarchical Structure: Groups can have parent-child relationships
- Organization Scoped: Groups belong to specific organizations
- Role Assignment: Groups can have roles assigned
- Inheritance: Groups can inherit permissions from parent groups
Roles
Roles define sets of permissions:
- Organization Scoped: Roles belong to specific organizations
- Permission Assignment: Roles have permissions assigned
- Permission Groups: Roles can include permission groups
- User Assignment: Roles can be assigned to users or groups
Permissions
Permissions define what actions can be performed:
- Resource Types: Permissions apply to resources (tables, rows, columns, JSON keys)
- Actions: Permissions define actions (read, write, delete, etc.)
- Conditions: Permissions can have conditions (ABAC - Attribute-Based Access Control)
- Permission Groups: Permissions can be organized into groups
How Organization Management Works
Hierarchical Structure
Organizations form a tree structure:
- Root Level: Top-level organizations
- Child Levels: Sub-organizations nested under parents
- Visualization: Organization tree displayed as a graph/flow diagram
- Navigation: Navigate through organization hierarchy
User Management
Users are managed across organizations:
- User Creation: Create users and assign to organizations
- Multiple Organizations: Assign users to multiple organizations
- Role Assignment: Assign roles directly to users
- Group Membership: Add users to groups
Group Management
Groups organize users within organizations:
- Group Creation: Create groups within organizations
- Hierarchical Groups: Create parent-child group structures
- User Assignment: Add users to groups
- Role Assignment: Assign roles to groups
Role Management
Roles define permission sets:
- Role Creation: Create roles within organizations
- Permission Assignment: Assign permissions to roles
- Permission Groups: Include permission groups in roles
- User/Group Assignment: Assign roles to users or groups
Permission System
Permissions control access:
- Resource-Based: Permissions apply to specific resources
- Action-Based: Permissions define allowed actions
- Conditional: Permissions can have conditions
- Inheritance: Permissions can be inherited through groups
Organization Features
Organization Tree
Visual representation of organization hierarchy:
- Graph View: Interactive graph showing organization relationships
- Node Representation: Each organization shown as a node
- Parent-Child Links: Visual connections between parent and child organizations
- Navigation: Click nodes to view details or add children
Multi-Organization Support
Users can belong to multiple organizations:
- Organization Selection: Users can switch between organizations
- Primary Organization: One organization designated as primary
- Cross-Organization Access: Users can access resources from multiple organizations
- Organization Context: System context switches based on selected organization
Access Control
Comprehensive access control system:
- Role-Based Access Control (RBAC): Permissions assigned through roles
- Group-Based Access: Permissions inherited through group membership
- User-Level Permissions: Direct permission assignments to users
- Resource-Level Control: Permissions apply to specific resources
Using Organization Management
Organization management features can be:
- Created: Create organizations, users, groups, and roles
- Edited: Modify organization structure, user assignments, group membership, and role permissions
- Deleted: Remove organizations, users, groups, and roles (with proper validation)
- Visualized: View organization hierarchy as a tree/graph
- Managed: Manage permissions and access control
Getting Started
- Managing Organizations: Learn how to create and manage organizations
- Managing Users: Learn how to create and manage users
- Managing Groups: Learn how to create and manage groups
- Managing Roles: Learn how to create and manage roles
Related Introduction
- Objects Introduction - Understand how organizations relate to Object data
- Workflows Introduction - Learn about workflows that can be organization-scoped