# NEXUS AI Organizations

Organizations provide tenant isolation, members, roles, provider configuration, notifications, and organization-level permissions.

## Operations

Authorized organization administrators can list and invite users, update roles, suspend or activate members, reset a member password, inspect the role catalog, configure deployment settings and provider credentials, and manage notification settings.

## Roles and scopes

The platform includes Owner, Admin, and Developer roles. MCP uses narrow OAuth scopes for deployment, secrets, domains, databases, storage, managed databases, and support. REST API routes additionally enforce organization and project RBAC permissions.

## Safety

Member suspension, role changes, provider credential changes, and deployment-setting changes affect other users and services. Require explicit authorization and record the intended scope of the change.

## Related resources

- [Security](/docs/security.md)
- [Authentication](/docs/auth.md)
- [MCP tools](/mcp/tools.json)