Organizations, workspaces, members and roles
Who can see what, in the portal and in the app.
Portal: an organization has members with roles Owner (billing and everything), Admin (manages members) and Member. Owners and admins invite people by email; invitations expire after 7 days. A user can belong to several organizations and sign in once to all of them. App: an organization contains workspaces (one per app or group of services); each has its own keys and data. Workspace roles: Owner (everything, including access), Admin (runs the workspace except clearing data), Responder (handles alerts, incidents and security findings), Viewer (read-only), or Custom (set per area). The audit log records who changed what and when. Plans limit the number of workspaces and members; use get_plans for the numbers.