> ## Documentation Index
> Fetch the complete documentation index at: https://docs.danubeai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Organizations & Teams

> One governed workspace for your company: members, roles, and teams

An organization is the unit of governance in Danube. Members share the organization's connected tools, its access policies apply to every agent that calls through a member's key, and every call lands in the organization's audit log.

Every account starts with a personal organization. Creating a company organization moves your team onto shared governance without changing how agents connect: the same API keys, the same MCP endpoint.

## Roles

Roles are ordered by privilege. A higher role can do everything a lower one can.

| Role       | Can do                                                                                                                                                |
| ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Owner**  | Everything an admin can, plus change or remove other owners and delete the organization. The last owner cannot be removed.                            |
| **Admin**  | Manage members, teams, access policies, the audit log, and data-plane agents. Admins and owners always keep full tool access, regardless of policies. |
| **Member** | Use the organization's tools within the access policies. The default role for new members.                                                            |
| **Viewer** | Read-only access to the organization's catalog and settings.                                                                                          |

## Set up an organization

<Steps>
  <Step title="Create the organization">
    Go to [Dashboard > Organization](https://danubeai.com/dashboard/organization) and click **Create organization**. Give it a name; the URL slug is derived from the name unless you set one.
  </Step>

  <Step title="Add members">
    Members are added by the email address of an existing Danube account, with a role. There is no invitation email in this release: ask teammates to sign up at [danubeai.com](https://danubeai.com) first, then add them.
  </Step>

  <Step title="Create teams (optional)">
    Teams group members inside an organization so that [access policies](/organizations/policies) can target a team instead of individuals. Each team has a lead and members.
  </Step>

  <Step title="Switch context">
    The organization switcher in the dashboard header controls which organization you are acting in. Tools you connect, keys you create, and policies you edit belong to the active organization.
  </Step>
</Steps>

## How organizations change tool access

* **Shared credentials.** A service connected inside an organization is available to every member the policies allow, without each person connecting it again.
* **Internal tools.** Services created with the [Connector Builder](/connectors) or marked internal are visible only to members of the organization, never in the public catalog.
* **Policies.** With no policies, every member has full access. Adding the first policy switches the organization to deny-by-default for members. See [Tool Access Policies](/organizations/policies).
* **Audit.** Every execution, denial, membership change and policy change is recorded. See [Audit Log](/organizations/audit-log).

## Plans

Organizations carry a plan (`free`, `team`, or `enterprise`) that is separate from an individual account's subscription. See [Plans & Billing](/billing) for what each tier includes and how to upgrade.

## Endpoints

All organization endpoints live under `/v1/organizations` and accept the same authentication as the dashboard (a session token) or an API key.

| Method                 | Path                                           | Minimum role                                     |
| ---------------------- | ---------------------------------------------- | ------------------------------------------------ |
| `POST`                 | `/v1/organizations`                            | any signed-in user                               |
| `GET`                  | `/v1/organizations`                            | member (lists your organizations with your role) |
| `GET` `PATCH` `DELETE` | `/v1/organizations/{org_id}`                   | member / admin / owner                           |
| `GET` `POST`           | `/v1/organizations/{org_id}/members`           | member / admin                                   |
| `PATCH` `DELETE`       | `/v1/organizations/{org_id}/members/{user_id}` | admin (owner to change owners)                   |
| `GET` `POST`           | `/v1/organizations/{org_id}/teams`             | member / admin                                   |
| `GET`                  | `/v1/organizations/{org_id}/audit`             | admin                                            |
| `GET` `POST` `DELETE`  | `/v1/organizations/{org_id}/grants`            | admin                                            |

Member operations take the Danube user id of the member. Adding a member takes `{"email": "...", "role": "member"}`.