Organization

An organization is the top-level scope in Sursakit. Everything — workspaces, services, sessions, members, billing — lives under exactly one organization.

What an organization holds

• Members — users invited to the organization. Membership is granted through invitations with optional expiration.
• Teams — sub-groups of members for finer-grained access control.
• Workspaces — every workspace belongs to one organization.

Roles and access

Organizations support role-based access (user, admin, …). Admins can:

• Invite and remove members.
• Promote or demote members.
• Manage billing and credits.
• Issue and revoke API keys.

Joining an organization

Members join via an invitation link. Invitation codes expire; ask an admin to resend if yours has lapsed.

Switching organizations

If you belong to more than one, use the organization switcher in the application header.

Security and data isolation

• Code, files, and runtime state stay scoped to the organization that owns the workspace.
• Sessions are managed by the auth layer; admin impersonation is logged.
• Sensitive fields are encrypted at rest with a server-side key.