Organizations, sites and roles
Organization, site and project
Section titled “Organization, site and project”| Term | What it is |
|---|---|
| Organization | The company. It has members with organization roles. |
| Site | The company’s workspace, on its own address <slug>.orbit.inortix.com. The site is taken from the host name. |
| Project | Where work happens. A project is the unit of membership for every product. |
Creating a company creates the organization (with you as owner), the site and its storage, and your place on the site as administrator, in one step. See Create your company in Orbit.
Roles at three levels
Section titled “Roles at three levels”| Level | Roles |
|---|---|
| Organization | owner, admin, member |
| Site | admin, member, viewer |
| Project | admin, member, viewer |
Site and project roles are independent: a person can be a site member and administer one project. Project administrators manage memberships, workflows, automation rules and project custom fields. Global configuration and user invitations need a site administrator. A viewer cannot write project data.
The last usable site administrator cannot be demoted or disabled.
Everyone can read the permission scheme, and administrators can ask the permission helper why a person can or cannot do something. See People, groups, guests and product access.
Data isolation
Section titled “Data isolation”All companies share one database, and each company’s data is isolated by PostgreSQL row-level security on every site table. A request without a valid site is denied by the database itself. Every API, search, export and live event excludes other companies. The number of companies is not limited.
What runs on a company site today
Section titled “What runs on a company site today”Several sites in one organization (Enterprise) are also Planned, and so are an own domain and organization-level branding. A site’s logo and accent colour can already be set. See Site branding.
Inviting a site administrator
Section titled “Inviting a site administrator”A site administrator is invited by e-mail with an organization role. Who may give which organization role:
| Inviter | May give |
|---|---|
| Organization owner | owner, admin or member |
| Organization administrator | up to admin |
| Site administrator | member only |
The invitation expires in 1 to 30 days (7 by default). A new invitation to the same address revokes the open one. The link opens on the site’s own host. Accepting it creates the account if needed, makes the person a site administrator and gives at least the offered organization role. If the inviter has lost that authority in the meantime, accepting is refused.
Feature switches
Section titled “Feature switches”Preview features are switched on per site. A switch only decides what is offered: permissions are checked as always. Site and organization administrators set a switch for their site or return it to the default.