Team and roles

Membership is per organization. The portal shows only the active organization, and switching organizations re-checks membership on every request. Invite people with the smallest role that lets them work.

RolesLink to this section

Invite a memberLink to this section

1. 01

   Open Team

   Owner or admin only.

2. 02

   Enter the work email

   Use the address the person controls. The invitation is tied to it.

3. 03

   Choose a role

   Default to developer for engineers and viewer for auditors.

4. 04

   Send

   The invitation expires after seven days.

curl -s https://cloud.mainai.dk/api/portal/members/invite \
  -H "Content-Type: application/json" \
  -H "Origin: https://cloud.mainai.dk" \
  -H "Cookie: $PORTAL_COOKIE" \
  -d '{ "email": "engineer@example.eu", "role": "developer" }'

The invitee must have an account with that email before accepting. Invitations are single-use and hashed at rest.

Change a roleLink to this section

curl -s -X PATCH https://cloud.mainai.dk/api/portal/members/$USER_ID \
  -H "Content-Type: application/json" \
  -H "Origin: https://cloud.mainai.dk" \
  -H "Cookie: $PORTAL_COOKIE" \
  -d '{ "role": "billing" }'

A role change applies on the member's next request. Longer-lived sessions do not cache permissions beyond their current page load.

Remove a memberLink to this section

curl -s -X DELETE https://cloud.mainai.dk/api/portal/members/$USER_ID \
  -H "Origin: https://cloud.mainai.dk" \
  -H "Cookie: $PORTAL_COOKIE" -o /dev/null -w "%{http_code}\n"

Removal drops the membership immediately. Keys created by the person stay with the organization; keys are organization assets, not personal assets. Sessions for other organizations are unaffected.

Offboarding checklistLink to this section

1. 01Remove the membership.
2. 02Rotate any key the person could read in plaintext or store.
3. 03Check recent audit entries for their user ID.
4. 04Move ownership of open invoices or KYB cases to another billing member.
5. 05Keep at least two owners so a departure cannot strand the organization.

RelatedLink to this section

Authentication · Billing · KYB · Security