This page describes how organizations are structured.

Organizations are entities that contain memberships and that can be associated with applications.

You are able to use organizations for multiple purposes:

  • To restrict access over a certain resource/page;

  • To manage/keep track a group of users using roles (for example like in an internal company application);

  • And more!

A user's relation to an organization is called a Membership.

A membership can contain several roles, which can be arbitrary strings that are used to describe the purpose of the user in the organization.

There are also some special roles that give the user access to some features.

Special Roles

Special roles have permissions and a permission level.

The permission level of a role is used to calculate the permission level of the membership, the role with the lowest permission level is counted as main role.

Users cannot preform actions on other users with lower or equal membership permission level.

NamePermissionsPermission Level


  • Delete the organization.



  • Update organization details.

  • Update membership roles;



  • Invite members.

  • Remove members.



  • Access to the organization:roles scope;

  • The ability to associate this organization with an application.


Last updated