Appearance
Accounts and access
One identity can hold several independent capabilities.
| Capability | What grants it | What it enables |
|---|---|---|
| Member account | Registration | Sign in and use assigned organization services |
| Organization Admin account type | Platform-approved account upgrade | Create organizations and open the account-level organization workspace |
| Platform Admin | Explicit platform administrator grant | Manage platform-wide settings and upgrade requests |
| Organization Owner | Ownership of a particular organization | Full administration in Owner mode |
| Organization Admin UserType | Assigned by that organization's owner | Enter Admin mode; configured grants determine available actions |
An organization Admin UserType does not grant the account-level upgrade or Platform Admin privilege. A delegated admin can help manage an organization without permission to create their own organizations.
Workspace versus role
The account access bar navigates between account workspaces. It does not impersonate another account or remove underlying account capabilities.
Inside an organization, selecting Admin activates administration permissions. Selecting an ordinary UserType leaves Admin mode. Owner mode retains full organization control.
Access expiry
Owners can set a membership to Never or a specific expiry time. Expiry blocks that organization on subsequent API requests without deleting content, roles, the global account, or other organization memberships. Renewing the membership restores its retained roles.

