Organizations

An organization is the top-level entity in your evroc account. It represents your company or team and provides a unified structure for managing all your cloud resources, users, and access policies.

What an organization contains

Your organization is the root container for:

  • Projects - Isolated containers for cloud resources
  • Users - People who can access resources within the organization
  • Permission sets - Access grants that link users to projects

All resources you create exist within a project, and all projects exist within your organization.

Organization administrators

Organization administrators have full access to all projects and resources within the organization. They can:

  • Create and delete projects
  • Grant and revoke permissions for any user
  • Manage billing and account settings
  • Access all resources across all projects

To grant a user organization-wide admin access, create a permission set with the --admin flag. See Manage permissions for instructions.

Single organization model

Each evroc account belongs to exactly one organization. If you need to separate workloads completely (for example, between different business units with separate billing), use separate evroc accounts.

Within a single organization, use projects to isolate resources and control access.