Access and Organization

Use these guides to build organization-aware clients without treating authentication, membership, entitlement policy, and resource permission as one decision.

• Organization membership and invitations covers shell membership, protected organization data, immutable invitation authorization, and owner safeguards.
• Organization permission management covers the capability catalog, current-user introspection, groups, assignments, managed document paths, audit, and structured denials.
• Organization activation and billing covers pending organizations, Stripe Checkout, webhook-derived activation, payment recovery, billing permissions, and manually managed enterprise organizations.
• Entitlements and operational limits explains exact version ceilings, custom tiers, storage, Cluster/Location capacity, and monthly and lifetime Job accounting.
• Cluster sharing and permissions covers cross-organization discovery, provenance-owned authenticated sharing, safe revocation, and legacy Contributor compatibility.
• Scoped contacts applies the same visibility model to contact queries and mutations.