# Organizations and members

URL: https://docs.router.ezat.io/organizations

> Organizations hold the balance, API keys and usage. Create and switch organizations, invite people, and what each role can do.

## When to use this page

Use this page to share a balance and keys with a team, to keep projects or clients apart in separate organizations, or to find out what your role lets you do.

## What an organization is

An organization is where everything in EZAT Router lives: its **balance**, its **API keys**, its **usage** and its **payments**. Members of an organization share all of these. Nothing is shared between organizations: credit added to one can't pay for another's requests, and a key always bills the organization it belongs to.

A person can belong to several organizations, with a different role in each.

## Your first organization

Signing in for the first time creates an organization named after you (your name, or the start of your email address), with you as its **Owner**. It works like any other organization: you can rename it and invite people to it. If a sign-up credit is on offer, it goes to this organization, once per person.

## Create and switch organizations

The organization switcher is in the top bar: it shows the current organization's name.

- **Switch:** open the switcher and pick an organization. Every page (**Overview**, **API keys**, **Usage**, **Billing**, **Settings**) then shows that organization. The dashboard remembers the choice in this browser.
- **Create:** open the switcher, choose **Create organization**, enter a **Name** and choose **Create**. You are its owner. It starts with a zero balance, and you invite people from **Settings**. You can own up to 10 organizations.

To rename an organization, open **Settings**, change **Name** under **Organization** and save. The same card shows **Your role** and the **Organization ID**. Include the ID when you contact support@ezat.io about billing.

## Roles

| Action | Owner | Admin | Billing | Member |
| --- | --- | --- | --- | --- |
| See the balance, usage, members and the list of API keys | Yes | Yes | Yes | Yes |
| Create API keys | Yes | Yes | No | Yes |
| Revoke API keys | Any key | Any key | Own keys | Own keys |
| Add credits, see payments and credit activity, set the low balance alert | Yes | Yes | Yes | No |
| Rename the organization | Yes | Yes | No | No |
| Invite people, change roles, remove members | Yes | Yes, except owners | No | No |
| Make someone an owner, or change or remove an owner | Yes | No | No | No |
| Leave the organization | Yes, if another owner remains | Yes | Yes | Yes |

The dashboard describes the roles like this when you invite someone:

- **Owner:** full control, including billing, members and other owners.
- **Admin:** manages members, API keys and billing. Can't change owners.
- **Billing:** adds credits and sees payments and usage. Can't create API keys.
- **Member:** creates and uses API keys and sees usage. Can't see payments.

An organization always has at least one owner. To step down as the last owner, make someone else an owner first.

## Invite people

Owners and admins can invite anyone by email:

1. Open **Settings**. Under **Members**, choose **Invite**.
2. Enter the person's **Email** and pick a **Role**, then choose **Send invitation**.
3. **Invitation ready** shows the **Invitation link**. EZAT Router also emails it, but if the email doesn't arrive, copy the link and send it yourself.

About invitations:

- The link works for 7 days, and only for the email address you entered.
- Open invitations are listed under **Pending invitations**, where you can **Resend with a new link** or **Revoke** them. Resending replaces the link, so the old one stops working.
- Inviting an address that already has an open invitation replaces it, with the new role and a new link.
- An organization can have up to 50 open invitations.

### Accept an invitation

1. Open the link. It shows which organization invited you, with which role, and for which email address.
2. If you aren't signed in, choose **Sign in to accept** and sign in with the invited email address. A new account is created if you don't have one.
3. Choose **Accept invitation**. The organization then appears in your organization switcher.

You must be signed in with the invited address. If you are signed in as someone else, choose **Sign in with another account**. An expired or revoked link can't be used: ask for a new invitation.

## Change roles and remove members

Owners and admins manage members under **Settings** → **Members**:

- **Change a role:** pick a new role in the member's row. Only owners can make someone an owner, or change or remove an owner.
- **Remove a member:** choose remove on their row, then **Remove**. They lose access at once.

API keys that a removed member created belong to the organization and keep working. Revoke them on the **API keys** page if they shouldn't.

## Leave an organization

Open **Settings**, choose **Leave** under **Leave organization**, and confirm. You lose access to its keys, balance and usage; the organization and its keys stay as they are. To come back, you need a new invitation.

If you leave the only organization you belong to, you get a new, empty organization the next time you use the dashboard. It has a zero balance: the sign-up credit is given only once per person.

## For AI agents

1. API keys belong to one organization. A key bills the organization it was created in, whichever organization the user has selected in the dashboard later.
2. If a request fails with `402` and the user says they added credit, ask whether they added it to the organization the key belongs to.
3. Only owners, admins and billing members can add credit, and billing members can't create keys. Tell the user which role they need instead of retrying.