Skip to main content
An organization is the top-level account in CloudThinker. It owns billing, seats, and the member list, and it contains one or more workspaces where the actual work happens.

Prerequisites

  • Most tasks on this page need an organization Owner or Admin. Developers and Viewers don’t see Admin Settings in their menu, even when they’re Admin of a workspace through an override. The one page such a workspace Admin can open there is Guardrails, from a direct link. A workspace Admin manages that workspace in More → Workspace settings, including its own BYOK key.
  • Anyone except the Owner can leave an organization.

How organizations and workspaces fit together

When you sign up, CloudThinker creates an organization named after you (for example, “Jane’s Organization”) and makes you its Owner. Onboarding then creates your first workspace inside it. Approvals are configured inside each workspace. Credit limits are set by an Owner or Admin in Admin Settings, with one cap per workspace. Keep production and non-production in separate workspaces when one needs stricter approvals or a tighter budget. See choose a layout.

Open Admin Settings

Organization controls live in Admin Settings, separate from More → Workspace settings, which covers one workspace at a time.
1

Open the account menu

Click your avatar at the bottom of the sidebar. The menu lists your organizations on the left and the selected organization’s workspaces on the right.
2

Open Admin settings

With your current organization selected, click Admin settings.Success state: the sidebar switches to the Admin Settings list, starting with Organization and Workspaces.
Admin Settings lists every page there, what it sets, and the guide for each. Which pages you see depends on your organization role and on what’s enabled for your organization; the role table below shows what each role can change. Workspaces is the only place a workspace can be deleted.

Invite members

1

Open the invite dialog

Go to Admin Settings → Organization and click Invite Members in the Members section. You can also click Invite members in the account menu.
2

Add email addresses

Type an address and press Enter or a comma to add it. You can invite up to 10 people at a time.
3

Choose a role

Pick Admin, Developer, or Viewer under Role. Developer is the default. You can’t invite someone as Owner.One role applies to every address in this batch. To invite people with different roles, send separate batches.
4

Pick workspaces for Developers and Viewers

Click Select workspaces and choose the workspaces they should join. Admins don’t need this, because they get every workspace automatically.
5

Send

Click Send Invitations.Success state: each invitee appears in the invitations list with a status and an expiry date, and receives an invitation email. Invitations expire after 7 days. Pending invitations sit in the Pending tab of the Members section.
If you invite a Developer or Viewer without selecting a workspace, they join the organization but can’t open any workspace until you grant access. See workspace members.
What the invitee does: they open the link in the email and sign in or sign up with the address you invited. A different address is rejected. Someone who already belongs to another organization keeps it, and both show in their account menu.

Organization roles

Every member has one organization role. The organization Owner is the highest role and pays for the organization. Organization Admins can set up everything in the organization except the Owner-only rows in Roles. Owners and Admins are Admins in every workspace. Developers and Viewers see the organization name and the workspaces they’re assigned to. They don’t see the organization member list, only the members of their workspaces in each workspace’s Members tab. *Viewers can open conversations, findings, and dashboards, but can’t chat with agents, run commands, or change anything except installing a Skills Hub skill. †Admins can change roles for and remove Developers and Viewers only. Admins can invite a new member as Admin, but only the Owner can promote an existing member to Admin, change an Admin’s role, or remove an Admin. People added through SSO just-in-time sign-in or SCIM get the Auto-assigned organization role you set on the connection (Viewer by default). With SCIM, you can also set a role per IdP group. See SSO and SCIM group mapping. You can raise or lower a Developer’s or Viewer’s role inside a single workspace. See workspace roles. “Member” is a legacy role name and works like Developer.

Manage members and invitations

All of these live in Admin Settings → Organization. A member shows as Inactive when they were provisioned (for example, through SSO) while the organization had no free seat. Inactive members don’t use a seat. Activating them uses one.

What happens when you remove someone

Before you remove someone who owns scheduled Automations, decide who takes them over. Otherwise those runs stop silently until a workspace Admin takes ownership.

Seats

Each active member and each pending invitation holds a seat. Free has one seat, and Team, Scale, and Scale Plus are billed per seat. An invitation expires after 7 days and then stops holding a seat. Resend Invitation sends a new link that’s valid for another 7 days. Total seats in the organization overview shows how many you’ve bought and how many are free. The Owner can click Manage there to add seats. When every seat is used, the invite button shows Seats full. See plans and pricing.

Control spend

Credits are pooled at the organization level, and you cap each workspace’s share of them in Admin Settings → Credit Limits. The page shows only when credit limits are enabled for your organization.
On Throttle, a workspace that hits its limit stops running agents on paid credits, mid-incident or not. Put production on Notify only or give it a high cap, and use Throttle for sandboxes.
Track consumption in Admin Settings → Usage. See credit limits and usage.

Transfer ownership

Each organization has one Owner. There’s no transfer button in the app. To move ownership, have the current Owner email support@cloudthinker.io with the organization name and the new Owner’s email.
  • The new Owner must already be an active member of the organization.
  • The old Owner becomes an Admin.
Request the transfer before the Owner leaves your company, while they can still send the email.

Leave an organization

Admins, Developers, and Viewers can leave. Click your avatar at the bottom of the sidebar, select the organization on the left, then click Leave organization at the bottom of its menu and confirm. Leaving has the same effects as being removed. See what happens when you remove someone. The Owner can’t leave. Transfer ownership first. Members provisioned through SCIM are removed in your identity provider instead.

Troubleshooting

Cause: your organization role is Developer or Viewer (being Admin of a workspace through an override doesn’t add Admin Settings), or you’ve selected an organization other than the one you’re working in.Fix: select your current organization in the account menu. If it still doesn’t appear, ask an Owner to make you an Admin. For workspace settings such as the workspace BYOK key, use More → Workspace settings instead.
Cause: active members plus pending invitations have used every seat.Fix: cancel invitations nobody will accept, remove members who left, or ask the Owner to add seats from Total seats → Manage.
Cause: one of these rules applies:
  • Admins can’t remove other Admins or the Owner.
  • The organization Owner can’t be removed.
  • Members provisioned through SCIM have to be removed in your identity provider. The error reads “This member was provisioned via SCIM.”
Fix: ask the Owner, or deprovision the user in your identity provider. See SCIM.
Cause: they’re a Developer or Viewer with no workspace assigned.Fix: go to Admin Settings → Organization, click Edit Workspace Access on their row, select the workspaces, and click Save.

Next steps

Create workspaces

Split work by environment, team, or customer.

Manage workspace members

Give people access to a workspace and set their role there.

Set up SSO

Let your team sign in with your identity provider.

Plans and pricing

Compare plans, seats, and workspace limits.