Organizations

An organization serves as the top-level logical unit representing a company or an entity in Shopware PaaS Native. It acts as the primary organizational unit that encompasses all resources, projects, and users associated with a particular business entity. By default, the initial admin user is added to an Organization and can further add more users.

Organizations are long-lived logical units and do not expire automatically.

To create additional organizations via CLI, run;

sw-paas organization create

Organization Members

Organization members are users who have been granted access to an organization and its resources.

Access control within an organization is managed by organization administrators through role assignments.

Roles

Organization members can be assigned different roles that determine their level of access and permissions:

• read-only: Access to projects and applications. Only actions allowed are get and list.
• developer: Access to projects and applications. All actions are allowed.
• project-admin: Access to projects and applications. All actions are allowed.
• account-admin: Access to account management. Actions for managing users are allowed.

User Management

If you already have the account-admin role and want to add additional users to your organization, they can share their user ID (sub-id) with you. You can instruct them to retrieve it using the following command:

sw-paas account whoami --output json

Or, if they have jq installed for easier parsing:

sw-paas account whoami --output json | jq ".sub"

Once you receive their sub (subject ID), you can add them with the appropriate role.

sw-paas account user add

To remove a user from the organization:

sw-paas account user remove

For project-level and application-level memberships, membership requests, service accounts, and tokens, see account guide.