What organizations contain
Groups vs. teams
Groups and teams are two ways to organize people in an organization. They solve different problems and most organizations use both.- Use a group to answer “who can use this runner?” or “who can edit this project?”
- Use a team to answer “who’s on the Backend team?” and “how much did Backend spend this month?”
See Manage groups and Manage teams for the details.
Isolation
Organizations are hard boundaries. Resources cannot be shared or transferred between them. Each runner, project, and environment belongs to exactly one organization. Users can be members of multiple organizations but must switch between them explicitly.What admins usually manage
Organization admins usually own:- who can join and how they authenticate
- which runners and projects are available
- how resources are shared across teams
- which guardrails and policies apply by default
- what secrets and service accounts shared workflows can use
Common operating model
For many teams, the pattern looks like this:- create or join the organization
- connect identity and invite members
- add runners or enable Ona Cloud regions
- create shared projects
- apply policies, secrets, and guardrails as the team grows