Members and invitations

Open /<organization-slug>/members to manage organization access. The Members and Invitations tabs always operate on the active organization.

Role reference

Parix currently uses three fixed organization roles.

Owner

The organization creator receives the ownership role. Owners can complete organization deletion and also pass the management checks available to administrators. The invite dialog does not offer owner, and the dashboard does not currently provide ownership transfer.

Administrator

Administrators can perform the management operations currently guarded for owner or admin, including:

• update organization settings; organization deletion remains owner-only
• manage billing
• invite or remove members and cancel invitations
• generate, rotate, and delete API keys
• create and restore backups
• change database instances, storage, parameters, and CDC configuration where the plan and provider support it
• upgrade or delete a database

Member

Members can open organization and database views available to the active organization, including member-visible query and observability surfaces. They cannot perform the owner/administrator operations listed above. A member can leave an organization from their own row.

The application enforces these checks on the server. Hiding or disabling a button is not the authorization boundary.

Review members

The Members tab shows each member's:

• name and email address
• organization role
• registered MFA method badges (Passkey and Two-factor), when present

The badges show only whether a method is registered; they do not reveal passkey material, TOTP secrets, or backup codes. Search currently matches email addresses.

Invite a member

Only an owner or administrator can send an invitation.

1. Open Members or Invitations.
2. Select Invite member.
3. Enter a valid email address.
4. Choose Member or Administrator.
5. Send the invitation.

The invitation email contains an accept link. If the recipient is signed out, Parix sends them through sign-in and returns them to the accept route. Acceptance adds the membership, activates the organization, and opens its Members page.

Pending invitations show their email, requested role, creation time, and expiration time. Owners and administrators can cancel a pending invitation.

Capacity limits

The authentication service currently caps active organization membership at 50. Plan entitlement rows also contain a team-seat limit; invitation enforcement counts active members plus pending invitations and applies the strictest entitlement among the organization's active database plans.

The checked-in entitlement seed is 100 seats for every current plan, so the 50-member authentication limit is the effective active-member ceiling today. Cancel stale invitations before retrying a quota-rejected invite. See Plans and limits.

Remove a member or leave

An owner or administrator can remove another member from the Members tab. A user cannot remove their own row with the remove action; they must select Leave instead.

After leaving:

• Parix activates the first remaining organization and opens it
• if the user has no remaining organizations, Parix returns them to onboarding

The organization service may reject an operation that would violate its ownership rules. The current dashboard does not provide a role-editing or ownership-transfer control to resolve those cases.

Audit trail

Invitation sent, invitation canceled, member removed, and organization left events are written to the organization audit stream. See Notifications and audit log.