Organizations, account and access
A selected organization scopes data; the server still checks membership and permissions.
Sign-in and account
The dashboard uses Google sign-in. Profile settings can update the account details exposed by the application. Expired identity may require signing in again; email/password login and SAML sign-on are not available here.
The organization switcher selects among the user’s memberships. Switching clears data and drafts tied to the prior organization; a copied event link does not grant access.
Roles
Reading an event includes authorized retained-content access for viewers. API keys additionally require the route’s supported scope. The UI’s disabled control is guidance; server checks enforce permissions.
| Role | Capabilities |
|---|---|
| Owner | Organization administration and deletion; members, sources, keys, alerts, events, replay and audit |
| Admin | Administrative actions except organization deletion |
| Member | Read organization/events/alerts, manage sources and request replay |
| Viewer | Read organization/events/alerts/audit; no source writes or replay |
Members and invitations
Owners/admins can manage existing members and roles subject to ownership safeguards. Invitation onboarding and invitation email are not available in this release.
Owners/admins can inspect or remove existing invitation records. A stored record does not establish email delivery or a completed join workflow.
Destructive actions
Deleting a source permanently removes its captured events and associated retained content/delivery records. Pause preserves history while changing future capture. Read the confirmation and make sure the organization is correct.
Organization deletion is owner-only and affects organization data. It is not equivalent to signing out.