Organizations and members

An organization is the unit everything else belongs to: its services, its members, its API keys and its verified domains. Permissions are held per organization, so the same person can be an admin in one organization and hold only a few permissions in another.

Create an organization

Open the organization switcher at the top of the sidebar and choose Add organization, or choose New organization on the Organizations page.
In the Create a new organization dialog, enter the Organization name. The URL slug is filled in from the name as you type; change it if you want a different one. It is what appears in the portal’s addresses.
Optionally add the Website URL and Industry.
Tick the box to accept the Terms of Service, then select Create organization. The button stays disabled until the box is ticked.

Creating an organization enters a contract on the free plan, so it requires the terms in force to be accepted. GraphPilot records each acceptance with the version of the terms, the time, the user who accepted (with the email address and name of their login at that moment), the organization and its billing account. The Privacy Policy is linked below the box for information; it is not something you accept. When the terms change, the next organization you create asks for the new version.

You become the new organization’s admin. It starts with no services: create one from its Dashboard, see Services and settings.

Organizations per billing account

Every organization you create is funded by your billing account, which shares its plan and allowances among them (see billing and usage). A billing account funds at most 3 organizations, on every plan. When it already funds 3, the dialog shows Organization not created with the message “A billing account can fund up to 3 organizations, and yours already does. Delete an organization you no longer need, or contact support to fund more organizations.” Nothing is created. Deleting an organization frees its place as soon as the deletion starts. To fund more than 3, contact support: GraphPilot can raise the number for one billing account.

Switch between organizations

The organization switcher at the top of the sidebar lists every organization you belong to, and under each one its services. Pick an organization to open its Dashboard, or a service to open that service directly. The portal switches your session to the organization you picked, so what you see and what you may do always match the organization in the address bar.

The CLI keeps its own current organization. See switch organizations.

Members and roles

Open Members in the organization’s sidebar. The page lists everyone in the organization with their role, and is where you invite people, change a member’s role, and remove a member. An invited person receives an email with a link to accept. Admins, Developers and Members can manage members; Viewers cannot. You can only invite someone with, or change someone to, a role whose permissions you hold yourself: a Member can invite a Member or a Viewer, but not a Developer or an Admin. Only an Admin can give someone the Admin role.

A role is a set of permissions. The permissions are the same ones an API key carries. The GraphPilot API checks them on every action. In the portal, a control you lack the permission for is not shown; see hidden or disabled for the rule and its exceptions.

Every permission, and which ones each job needs, is on permissions.

An organization has four roles: Admin, Member, Developer and Viewer. Whoever creates an organization becomes its Admin. Admins receive the billing emails; Admins and Members receive the alert emails. If a member needs a permission they do not have, someone whose role holds every permission of the new role gives it to them, for example an Admin.

Each role holds these permissions:

Permission	Admin	Developer	Member	Viewer
`service:view`	Yes	Yes	Yes	Yes
`service:edit`	Yes	Yes	No	No
`service:delete`	Yes	No	No	No
`deployment:view`	Yes	Yes	Yes	Yes
`deployment:edit`	Yes	Yes	Yes	No
`cache:purge`	Yes	Yes	Yes	No
`organization:edit`	Yes	No	No	No
`organization:delete`	Yes	No	No	No
`billing:view`	Yes	Yes	Yes	Yes
`billing:edit`	Yes	No	No	No

Admins, Developers and Members can also create and revoke organization API keys; Viewers cannot. Every role can create personal keys, limited to the permissions it holds, and only Admins can revoke another member’s personal key.

Organization settings

Open Settings in the organization’s sidebar. It has three sections.

General

The Organization name, URL slug, Website URL and Industry. Select Save changes to apply them. Saving needs the organization:edit permission; without it the change is refused. Changing the URL slug changes the portal’s addresses for the organization, so bookmarks to the old one stop working.

Domains

The domains your organization has verified. A verified domain is what lets a service answer on a hostname of your own. See Custom domains.

API keys

Organization keys and Personal keys, for the CLI in CI and for scripts that call the GraphPilot API. See API keys.

Delete an organization

Delete organization sits at the foot of Settings → General. It needs the organization:delete permission; without it the button is disabled.

Deleting an organization deletes every service in it, removes every member’s access, revokes every API key, and releases its hostnames and verified domains, which someone else can then claim. The telemetry, logs and stored files of its services stop being readable at once and are deleted within minutes, once each service is off the edge; the organization’s remaining telemetry goes with it. Some records, such as the terms the organization accepted and its billing history, are kept on purpose; see what a deletion keeps. Deletion starts immediately and cannot be undone.

If the organization pays for an annual plan, the plan is not refunded: the contract ends with the deletion, fees paid in advance for the rest of its term are not credited, and the usage up to the deletion is invoiced on a final invoice.

The deletion completes in the background. Its services stop accepting requests at once. Until the deletion is complete, the organization stays in the organization list but accepts no changes, and any change is refused with “This organization is being deleted”. When the organization has services, this takes at least 15 minutes, and at most 72 hours, without further action.

Select Delete organization. The dialog lists what will be deleted and what will be released.
Type the organization’s name to confirm, then select Send confirmation code.
Enter the 6-digit code from the email the portal sends you. The code is good for ten minutes and for one deletion. Each code allows five tries; after that, send a new one. Send a new code replaces the earlier code, so enter the one from the newest email. You can request at most three codes a minute, across every deletion.
Review the summary and select Delete organization.

Once the deletion has started, a dialog says name is being deleted. Select Continue: the portal moves you to another organization you belong to, or to the Organizations page if there is none, while the deletion completes in the background.

API keys
Custom domains
Services and settings
Billing and usage: how a billing account funds organizations