Organizations

If your customers are companies or teams rather than individuals, use organizations. A person can belong to several, with a different role in each. Your access rules can then say “members of this organization can edit this project”.

Organizations page — Users & auth → Organizations: New organization.

In Studio

Users & auth → People → Organizations. New organization:

Field	Meaning
Organization name	What people see
Slug	Lowercase letters, digits and hyphens. It appears in URLs and in the organization claim of a session
Owner’s email	An existing user to make the owner. Without one, the organization starts with no members

Open an organization to manage:

Members: add by Email to add with a Role, change a role, remove.
Teams: smaller groups inside the organization.
Delete organization: permanent.

To bring in people who don’t have accounts yet, use Invitations.

Roles inside an organization

Role	Typical power
`viewer`	Read only
`member`	Normal use
`admin`	Manage people and settings
`owner`	Everything, including deleting the organization

These are separate from global roles. Use them in rules with $auth.org_role (recipes).

In your app

People can manage their own organizations through the client.

const org = await pawabase.auth.orgs.create({ slug: "acme", name: "Acme Inc", metadata: { plan: "team" } });
const mine = await pawabase.auth.orgs.list();           // each has `role`: the caller's role in it
const one = await pawabase.auth.orgs.get("acme");
await pawabase.auth.orgs.update("acme", { name: "Acme Incorporated" });
await pawabase.auth.orgs.delete("acme");

org = pb.auth.orgs.create(slug="acme", name="Acme Inc", metadata={"plan": "team"})
mine = pb.auth.orgs.list()
one = pb.auth.orgs.get("acme")
pb.auth.orgs.update("acme", name="Acme Incorporated")
pb.auth.orgs.delete("acme")

Members

const members = await pawabase.auth.orgs.members("acme");
await pawabase.auth.orgs.setMemberRole("acme", userId, "admin");
await pawabase.auth.orgs.removeMember("acme", userId);

members = pb.auth.orgs.members("acme")
pb.auth.orgs.set_member_role("acme", user_id, "admin")
pb.auth.orgs.remove_member("acme", user_id)

Teams

await pawabase.auth.orgs.createTeam("acme", { slug: "design", name: "Design" });
await pawabase.auth.orgs.addTeamMember("acme", "design", userId);
await pawabase.auth.orgs.removeTeamMember("acme", "design", userId);
const teams = await pawabase.auth.orgs.teams("acme");

Work inside an organization

A session can be scoped to one organization. Rules can then match on it, and the token carries org and org_role.

await pawabase.auth.signInWithPassword({ email, password, org: "acme" });   // sign in scoped to it
await pawabase.auth.switchOrg("globex");                                    // switch
await pawabase.auth.switchOrg(null);                                        // back to personal

pb.auth.sign_in_with_password(email=email, password=password, org="acme")
pb.auth.switch_org("globex")
pb.auth.switch_org(None)

Build an organization switcher from orgs.list() and call switchOrg when the person picks one. After switching, the session’s org and org_role update and TOKEN_REFRESHED fires.

Keep data per organization

Add an org column to your tables.
Set it from the active session on create: org: session.org.
Write a rule that compares it: $record.org equals$ auth.org.

See Access rules recipes and the Database.

Events

organization.created, organization.deleted and invitation.accepted are available to webhooks.

Invitations

Bring people in.

Token profiles

Organization-aware tokens for other services.

Getting started

Sign-in methods

Sign-up

Security

People

Developers

In Studio

Roles inside an organization

In your app

Members

Teams

Work inside an organization

Keep data per organization

Events

Invitations

Token profiles

​In Studio

​Roles inside an organization

​In your app

​Members

​Teams

​Work inside an organization

​Keep data per organization

​Events

Invitations

Token profiles

In Studio

Roles inside an organization

In your app

Members

Teams

Work inside an organization

Keep data per organization

Events