04 / IDENTITY

User & Org Management

Orgs, teams, invites, roles and fine-grained permissions — multi-tenant from the first commit, priced per org, not per connection.

Request early access Back to overview

1: API for every tenant
Nested: org + team model
Custom: role definitions
Hosted: invite flows

Orgs and teams

Nested tenancy that matches how enterprises actually buy: parent org, subsidiaries, project teams.

Invites that work

Hosted invite pages, domain capture, seat limits and expiring links out of the box.

Custom roles

Define roles and permissions as data, not deploys. Customers can compose their own.

Membership events

Every role change and removal lands in the audit log with the actor attached.

Directory sync ready

SCIM provisioning when a buyer needs it — priced sanely, never as the gate to basic auth.

Session controls

Impersonation with receipts, forced logout and per-org session policies.

Wired in one afternoon

Nested orgs and teams
Data-driven custom roles
Hosted invite + seat management
SCIM without the ransom pricing

santati · orgs.members

await bb.orgs.invite({
  org: 'org_kaito',
  email: 'ada@kaito.dev',
  role: 'admin',
  expiresIn: '7d',
})

await bb.orgs.setRole('mem_71c', 'custodian') // audit-logged

Ship user & org management this quarter

Request access