Organizations & Teams
Organizations provide multi-tenant isolation in FireBackup. All resources (projects, backups, schedules, storage destinations) belong to an organization, enabling team collaboration with role-based access control.
Understanding Organizations
Organization Scope
Everything in FireBackup is scoped to an organization:
- Projects - Firebase projects belong to one organization
- Backups - Backups are stored per organization
- Schedules - Backup schedules are organization-specific
- Storage - Storage destinations are configured per organization
- Members - Users are invited to specific organizations
Multi-Organization Support
Users can belong to multiple organizations:
- Personal organization - Created automatically for each user
- Team organizations - Shared organizations for teams
- Enterprise organizations - Large-scale deployments
Switch between organizations using the organization selector in the header.
Creating an Organization
Default Organization
When you sign up, FireBackup creates a personal organization with your name.
Creating Additional Organizations
- Click the organization selector in the header
- Click Create Organization
- Enter organization details:
| Field | Description |
|---|---|
| Name | Organization display name |
| Slug | URL-friendly identifier |
- Click Create
You become the Owner of the new organization.
Organization Settings
Accessing Settings
- Go to Settings in the sidebar
- Click Organization tab
General Settings
| Setting | Description |
|---|---|
| Name | Organization display name |
| Slug | URL identifier |
| Time Zone | Default time zone for schedules |
| Logo | Organization logo (shown in header) |
Updating Organization
- Navigate to Organization settings
- Modify desired fields
- Click Save Changes
Team Members
Viewing Members
The Members section shows all organization members:
| Column | Description |
|---|---|
| User | Name and email |
| Role | Permission level |
| Status | Active or Pending |
| Joined | When they joined |
| Last Active | Most recent activity |
Member Roles
| Role | Permissions |
|---|---|
| Owner | Full access, billing, can delete organization |
| Admin | Manage members, settings, all resources |
| Member | Create and manage backups, schedules, projects |
| Viewer | Read-only access to all resources |
Permission Matrix
| Action | Owner | Admin | Member | Viewer |
|---|---|---|---|---|
| View backups | Yes | Yes | Yes | Yes |
| Create backups | Yes | Yes | Yes | No |
| Delete backups | Yes | Yes | Yes | No |
| Manage schedules | Yes | Yes | Yes | No |
| Connect projects | Yes | Yes | Yes | No |
| Manage storage | Yes | Yes | No | No |
| Invite members | Yes | Yes | No | No |
| Manage roles | Yes | Yes | No | No |
| Organization settings | Yes | Yes | No | No |
| Billing | Yes | No | No | No |
| Delete organization | Yes | No | No | No |
Inviting Members
- Navigate to Organization settings > Members
- Click Invite Member
- Enter details:
| Field | Description |
|---|---|
| Invitee's email address | |
| Role | Permission level to assign |
- Click Send Invitation
The invitee receives an email with a link to accept the invitation.
Pending Invitations
View and manage pending invitations:
| Column | Description |
|---|---|
| Invited email | |
| Role | Assigned role |
| Sent | When invitation was sent |
| Expires | Invitation expiration |
Actions:
- Resend - Send invitation email again
- Cancel - Revoke the invitation
Managing Member Roles
To change a member's role:
- Find the member in the list
- Click the role dropdown
- Select new role
- Confirm change
Changing from Admin to Member removes their ability to invite others and manage settings.
Removing Members
To remove a member from the organization:
- Find the member in the list
- Click Remove
- Confirm removal
Removed members immediately lose access to all organization resources.
Accepting Invitations
When invited to an organization:
- Check your email for the invitation
- Click Accept Invitation
- Sign in or create an account
- You're added to the organization with the assigned role
Invitation Expiration
Invitations expire after 7 days. If expired:
- Contact the organization administrator
- Request a new invitation
Organization Billing
Viewing Subscription
Owners can view billing information:
- Go to Settings > Organization
- Click Billing tab
Shows:
- Current plan
- Usage metrics
- Billing history
- Payment methods
Upgrading Plans
- Navigate to Billing settings
- Click Upgrade Plan
- Select desired plan
- Complete payment
Managing Payment Methods
Add, update, or remove payment methods:
- Navigate to Billing settings
- Click Payment Methods
- Add or update payment details
Transferring Ownership
To transfer organization ownership:
- Navigate to Organization settings
- Click Transfer Ownership
- Select the new owner (must be Admin)
- Confirm transfer
After transfer, you become an Admin. Only the new Owner can transfer ownership again.
Deleting an Organization
Prerequisites
Before deleting:
- Must be the Owner
- All backups should be downloaded or deleted
- All members should be notified
Deletion Options
Soft Delete
Marks organization as deleted but retains data:
- Go to Organization settings
- Click Delete Organization
- Choose Soft Delete
- Type organization name to confirm
Data can be recovered within 30 days.
Force Delete
Permanently removes organization and all data:
- Go to Organization settings
- Click Delete Organization
- Choose Force Delete
- Type organization name to confirm
Force delete permanently removes:
- All projects
- All backups
- All schedules
- All storage destinations
- All member associations
This action cannot be undone.
Service Accounts
Organizations can use service accounts for programmatic access:
Creating Service Account
- Go to Settings > Organization
- Navigate to Service Accounts section
- Click Create Service Account
- Configure:
| Field | Description |
|---|---|
| Name | Service account identifier |
| Description | Purpose of this account |
| Permissions | API scopes |
- Click Create
- Download the API key (shown once)
Service Account Permissions
| Permission | Description |
|---|---|
backups:read | List and view backups |
backups:write | Create and delete backups |
schedules:read | View schedules |
schedules:write | Create and modify schedules |
projects:read | View connected projects |
projects:write | Connect and manage projects |
Using Service Accounts
Use the API key in requests:
curl -X GET https://api.firebackup.io/api/v1/backups \
-H "Authorization: Bearer SERVICE_ACCOUNT_KEY" \
-H "X-Organization-Id: org-123"
Rotating Service Account Keys
- Navigate to the service account
- Click Rotate Key
- Download new key
- Update your applications
- Old key is invalidated immediately
Deleting Service Accounts
- Navigate to the service account
- Click Delete
- Confirm deletion
Deleting a service account immediately invalidates its key. Ensure no critical systems depend on it.
Audit Logging
Organizations automatically log important actions:
Logged Events
| Category | Events |
|---|---|
| Members | Invite, join, role change, remove |
| Projects | Connect, disconnect, settings change |
| Backups | Create, restore, delete |
| Schedules | Create, modify, delete, toggle |
| Settings | Organization updates, billing changes |
Viewing Audit Logs
- Go to Settings > Organization
- Click Audit Log tab
- Filter and search logs
| Column | Description |
|---|---|
| Timestamp | When event occurred |
| User | Who performed action |
| Action | What was done |
| Resource | Affected resource |
| Details | Additional information |
Exporting Audit Logs
Export logs for compliance:
- Click Export
- Select date range
- Choose format (CSV, JSON)
- Download file
Best Practices
Organization Structure
| Scenario | Recommendation |
|---|---|
| Single developer | Use personal organization |
| Small team | One shared organization |
| Multiple projects | One organization per project or client |
| Enterprise | Organization per department or team |
Security Recommendations
- Use least privilege - Assign minimum required role
- Regular audits - Review members and permissions quarterly
- Service accounts - Use for automation, not personal access
- Rotate keys - Rotate service account keys periodically
- Monitor audit logs - Watch for unusual activity
Team Onboarding
When adding new team members:
- Create invitation with appropriate role
- Share relevant documentation
- Conduct initial walkthrough
- Review after first week
Team Offboarding
When removing team members:
- Review their created resources
- Transfer ownership if needed
- Remove from organization
- Rotate any shared credentials
Troubleshooting
"Invitation Expired" Error
Solution:
- Contact organization admin
- Request new invitation
"Permission Denied" Error
Possible causes:
- Insufficient role
- Resource belongs to different organization
Solution:
- Check your role in the organization
- Verify you're in the correct organization
- Contact admin for role upgrade
"Cannot Delete Organization"
Possible causes:
- Not the owner
- Active resources exist
Solution:
- Transfer ownership to yourself first
- Delete or migrate resources before deletion