Organizations & teams
An organization is your team’s shared workspace in Sencai - cloud instances, fleet agents, billing, and settings all belong to an organization, not to an individual user. Every Sencai user belongs to at least one organization, and can belong to several.
Creating an organization
Section titled “Creating an organization”- Log in to app.sencai.space.
- From the dashboard, choose to create a new organization and give it a name. A URL-friendly slug is generated from the name automatically - you can edit it before submitting.
- You’re automatically set as the organization’s Owner.
The organization detail screen
Section titled “The organization detail screen”Open an organization from your organization list to reach its detail screen, organized into tabs:
- Overview - member count, instance count, and other summary stats.
- Members - everyone with accepted membership, plus anyone with a still-pending invitation shown inline with a Pending invitation marker instead of a join date.
- Invitations - every invitation you’ve sent, its status, and who sent it, separately from the members list.
- Settings - the organization’s profile (company details live in the Admin Center), its VAT ID, a leaderboard opt-in, the Blueprint review switch (for those who may change organization settings; see Blueprints), an Organisation Operations card linking to merge/split (Owners and Admins), and (for Owners) the danger zone to delete the organization.
- Legal - the Data Processing Agreement and Master Service Agreement, with signing; see Agreements. (There is no separate Legal group in the menu.)
- Billing - one area for the organization’s money, with Plan & seats, Costs & usage, and Invoices & payment sections; see Billing & Plans.
- Cloud Accounts - a summary of the provider credentials this organization provisions with, with a Manage cloud accounts button that opens Settings → Cloud Credentials, where accounts are added, validated, scanned and removed; see Connect a cloud provider.
- Infrastructure Lifecycle - what happens to your cloud resources if a payment is not resolved; see Payment, invoices, and failed payments.
Roles and access-request tabs appear as well for those who may see them.
Every member of an organization has one of five roles: Owner, Admin, Member, Auditor, or Viewer. The five roles form a hierarchy, highest to lowest: Owner > Admin > Member > Auditor > Viewer. Auditor is read-oriented and sits below Member - it is not an elevated role. See Roles & permissions for exactly what each role can do and how to pick one.
Inviting members
Section titled “Inviting members”Owners and Admins can invite new members by email from the organization’s Members or Invitations tab, picking a role (Owner, Admin, Member, Auditor, or Viewer) for the invitee at the same time. See Roles & permissions for what each role grants.
An invitation must be accepted by the invited person before they count as a member of the organization - a pending, unaccepted invitation grants no access to anything. See Create your account for what the invited person sees and does to accept it.
Pending invitations can be revoked by an Owner or Admin at any time before they’re accepted. There’s no resend action today - if an invitation expired or the email got lost, revoke it and send a new one to the same address.
Removing members
Section titled “Removing members”An Owner or Admin can remove a member from the Members tab. The organization’s Owner can’t be removed this way - an organization must always keep at least one Owner. Removing a member revokes their access to that organization immediately; it doesn’t affect their access to any other organization they belong to.
Deleting an organization
Section titled “Deleting an organization”An Owner deletes an organization from the danger zone on the Settings tab. Deletion is permanent: the organization, its memberships and invitations are removed. It also decides what happens to the cloud resources the organization has, and the dialog spells that out before the delete button works:
- Resources on Sencai accounts - destroyed immediately. Servers and other resources that run on cloud accounts operated by Sencai are destroyed at the provider right away. No snapshot or backup is taken and they cannot be recovered. The dialog lists each one (kind, name, provider, region) and you must tick a box that says they will be destroyed. If the list changes while the dialog is open, the tick is cleared and you confirm again. If Sencai cannot remove some of them automatically, the dialog marks them, and they stay at the provider until Sencai removes them; contact support if you need that confirmed.
- Resources in your own cloud accounts - left untouched. Anything running in a cloud account you connected yourself keeps running, and your provider keeps billing you. Sencai stops managing it and changes nothing at the provider. The stored credentials are switched off (deactivated), so they can no longer be used.
When the organization’s data is permanently removed, its container registry data goes with it: the records of its images, scan results, signatures and the records of its signing keys, its scans and schedules for registries you connected, and the records of container deploys. Signatures can no longer be checked against Sencai records after that, so download the public keys and any signature material you need first.
You also type the organization’s name to confirm. If the preview of affected resources cannot be loaded, the dialog asks you to try again - an organization is never deleted without Sencai knowing which managed resources it has. Take a final snapshot or export what you need before deleting; nothing is taken for you.
Switching between organizations
Section titled “Switching between organizations”If you belong to more than one organization, switch between them from the organization switcher in the app’s top bar, or by opening a different organization from your organization list. Everything you see - instances, agents, billing, audit events - updates to reflect whichever organization is active.
Organization settings
Section titled “Organization settings”Beyond the detail screen’s own Settings tab, an organization’s broader configuration lives under the app’s Settings section - cloud credentials, spend caps, IP allowlisting, audit export, and more. See Finding your way around for the full map.
Settings → Org Operations (/gravity/settings/org-operations) is a
separate, Owner/Admin-only screen for two irreversible, larger-scale
actions: merging one organization into another (archiving the source),
and splitting an organization into two. Both move members and
instances permanently, so treat them as one-way operations, not something
to try casually.
Agency & MSP use
Section titled “Agency & MSP use”If you manage infrastructure for more than one customer organization - for example as an MSP or agency - Sencai supports cross-tenant relationships between organizations with their own audit trail, rather than sharing a single set of credentials across customers. See Agency & MSP for how this works.
What’s next
Section titled “What’s next”- Roles & permissions - what each role actually grants
- Connect a cloud provider
- Billing & Plans - what an organization’s plan is priced on
- Agency & MSP