Accounts, organizations and users
Your user identity, account membership and organization membership are separate resources. Choose the context you intend to manage before making a request.
Access boundaries
An account contains resources and account memberships. An organization has its own memberships and can manage associated accounts. Access to one account or resource does not establish access to another.
Account administrators can manage members, invitations, teams, resource permissions and capability grants. Organization administrators can manage organization access and associated accounts. An administrator permission requirement refers to your account or organization administrator.
Effective permissions
Your key access mode limits the requests you can make. Your membership, resource permissions, teams and capability grants also affect access. Effective-access reads let you inspect the resulting permissions. Account administration does not bypass account ownership checks.
Use sign-in and context selection and restricted keys before creating resources.