Organization¶
The Organization scope is where owners and admins run the account: who is in it, which projects exist, how quota is shared, how people sign in, and what everything costs. Choose Organization at the top of the scope selector. The billing role sees it too, with people, roles, billing and settings.
In the organization scope the menu's IAM, Billing, Activity, Quota and Settings are the organization's, and Compute, Networking, Storage and Security list every project's resources read-only. See The console.
-
IAM → People: invite people, change their roles, suspend or remove them.
-
IAM → Roles: your own organization and project roles.
-
IAM → Service accounts: identities for automation, their API keys and cloud credentials.
-
Billing → Usage: what has been measured, by project, location and resource. Provisional.
-
Billing: each month's cost at the published rates, where the money goes, and the prices.
-
Activity: every change, refusal and security event, and each project's operations.
-
Share the organization's budget between projects; presets and requests for more.
-
Settings → Projects: every project, access to one, and deleting a project safely.
-
Project creation, second factor, invitation domains, the audit log, and closing.
-
Which e-mails you get, and which are always sent.
Who sees what¶
| Page | Owner | Admin | Billing | Member | Viewer |
|---|---|---|---|---|---|
| The Organization scope | ✓ | ✓ | ✓ | — | — |
| IAM → People | Manage | Manage, not owners | See | — | — |
| IAM → Roles | Manage | Manage | See | — | — |
| IAM → Service accounts | Manage | Manage | — | — | — |
| Billing | See | See | See | — | — |
| Activity (audit log) | Read | Read | — | — | — |
| Quota | Manage | Manage | — | — | — |
| Settings | Manage | Manage, not security | See | — | — |
Members and viewers work inside projects. Every role sees IAM → People and IAM → Roles of the projects it works in. Roles and permissions has the full table.
Changes here take effect at once¶
Inviting someone, changing a role, editing a quota preset or a setting changes NubeStack Cloud's own records, so it takes effect at once and has no operation. Where a location must follow, such as a project's quota or someone's access in Horizon, it does so within minutes.