Organisation administration
Give named tenant administrators control of their own workspace.
Customer cloud · projects and access
Give customer teams autonomy inside clear boundaries.
Tenant administrators organise resources into projects, invite colleagues, assign roles and issue credentials while LayerOne enforces operator policy and quota.
- Workspace
- Organisation
- Customer account boundary
- Structure
- Projects
- Resources grouped by purpose
- People
- Role-based
- Delegated administration
- Automation
- Scoped credentials
- API access by project
Scope
Access designed around how customer teams work.
Organisation and project structure carries through resources, usage, credentials and audit history.
Project structure
Group services, people, budgets and credentials by workload or team.
Role assignment
Grant only the actions appropriate to administrators and members.
Scoped API access
Issue automation credentials with project and role context.
Operating workflow
Delegate routine administration without losing governance.
The operator defines the model; the customer manages day-to-day membership and projects.
- 01
Create the tenant
Establish the organisation and its first administrator.
- 02
Create projects
Separate resources by team, environment or workload.
- 03
Invite and assign
Add users and grant project-appropriate roles.
- 04
Audit
Keep user, API and resource actions attributable.
Two connected responsibilities
Operator control and customer action stay explicit.
What the operator governs
- Tenant administrators
- Role definitions and policy
- Organisation and project quotas
- Cross-tenant audit access
What tenant admins manage
- Projects and membership
- Role assignment inside the tenant
- Scoped credentials
- Their audit and resource context
Operational outcome
What this changes in the working model.
Less operator administration
Customer teams handle routine membership and projects.
Clear resource ownership
Every service and usage record belongs to a project.
Safer automation
Credentials inherit explicit scope and role.
Continue in this section
Partner with us
Model the customer organisation, not just the account.
We will map teams, projects, roles and credentials into a delegated access model.