Organizations & Teams

Organizations act as the top-level administrative entity in Codesphere, representing your company or business unit as a whole.

While Resource Groups/Teams are collection of actual resources and all the tools for interaction with them, the Organization layer provides a unified governance umbrella over all your Teams. It gives you a centralized overview and control over who has access to what areas of your company's resources.

Administering your Organization​

Access in Codesphere is strictly hierarchical to ensure security and ease of management.

• Organization Owner: Has full visibility and administrative control over the entire organization. They can invite users to the organization, oversee all associated teams, and manage top-level infrastructure and organization level settings. All teams within the organization automatically appear in an Owner's team list with Admin access — no explicit team membership is required. If an Owner is also an explicit member of a team with a specific role, that role takes precedence and no duplicate entry is created.
• Team Admin: Has administrative control strictly scoped to a specific team. They can manage team-level resources and assign existing organization members to their team.
• Team Member: Has role-based access to specific workspaces and landscapes within their assigned team, enabling them to develop and deploy applications.

User Management & Invites​

To maintain strict access control, user management operates top-down:

• Centralized Invites: Users must first be invited to the Organization.
• Team Assignment: Once a user is an Organization Member, they can be assigned to one or multiple Teams within that Organization.
• Secure Offboarding: This structure makes onboarding and offboarding highly secure. Removing a user from the Organization instantly and reliably revokes their access across all Teams they were part of.
• Leaving an Organization: Members can leave an organization themselves using the Leave Organization button on the Members page. If you are the sole Owner, you must first assign the Owner role to another member before you can leave.