Managing organization users

Access to an organization is controlled by assigning roles to users. The available roles are: superuser, project-admin, billing-admin, and member.

Permission	superuser	project-admin	billing-admin	member
View organization users	✅	✅	✅	✅
Manage organization users	✅	❌	❌	❌
Create projects	✅	✅	❌	❌
View projects	✅	❌	❌	❌
Manage project users	✅	❌	❌	❌
Delete projects	✅	❌	❌	❌
All other project/service operations	❌	❌	❌	❌
View organization billing data	❌	❌	✅	❌

Permission

superuser

project-admin

billing-admin

member

View organization users

✅

Manage organization users

✅

❌

Create projects

✅

❌

View projects

✅

❌

Manage project users

✅

❌

Delete projects

✅

❌

All other project/service operations

❌

View organization billing data

❌

✅

❌

Project-level operations are accessed via project-specific roles. A superuser has a subset of project permissions, including the ability to assign roles (including to themselves). When a user creates a project, they are automatically granted admin access to it. (see granting project roles)

The member role allows project admins to add users to their projects without needing to invite them to the organization.

Listing role bindings

You can list role bindings within an organization using the following command:

akka organization users list-bindings --organization <organization name>

Example output:

ROLE BINDING ID                        ROLE        USERNAME       EMAIL                      NAME
fd21044c-b973-4220-8f65-0f7d317bb23b   superuser   jane.citizen   [email protected]   Jane Citizen
120b75b6-6b53-4ebb-b23b-2272be974966   member      john.smith     [email protected]     John Smith

Granting a role

You can grant a role to a user in two ways:

1. Invite a User by Email

Send an email invitation with the following command:

akka organizations invitations create --organization <organization name> \
  --email <email address> --role <role>

The user will receive an email to join the organization. Once accepted, the role binding will be created.

2. Add a Role Directly

If the user is already a member, you can assign roles directly:

By e-mail:

akka organization users add-binding --organization <organization name> \
  --email <email address> --role <role>

By username:

akka organizations users add-binding --organization <organization name> \
  --username <username> --role <role>

Deleting a role binding

To delete a role binding, first list the users to get the role binding ID. Then, use the following command:

akka organizations users delete-binding --organization <organization name> \
  --id <role binding id>

Managing invitations

View outstanding invitations:

akka organizations invitations list --organization <organization name>