Organization context
A user can belong to more than one organization. Roles are resolved within the selected organization, so a person's role in one organization does not describe their role in another.
Explore organization managementRoles and effective access
These three terms describe different parts of the access model.
- Organization context
- The organization in which the user's role is being considered.
- Assigned role(Role)
- A role associated with the user in that organization. Eligible role permissions can be managed within that context.
- Effective access(Effective permissions)
- Access can reflect both role permissions and direct grants. Removing one role does not necessarily remove every permission.
Reviewing your team's access
Guidance for administrators
When responsibilities change, use these checks to guide your own access review.
- Check which organization you are managing.
- Review the user's assigned roles and any direct permission grants.
- Check the remaining permissions after changing or removing a role.