Partners
A Partner groups client Organizations under a partner workspace. Partner members can see the Partner and compact summaries of its linked Organizations without receiving access to those Organizations or their Projects.
Roles
Partner membership has two roles:
- Partner Admin (
owner) can view the Partner and holds its edit permission. - Partner Viewer (
viewer) can view the Partner.
Partner permissions are independent of Organization and Project roles. A Partner role does not grant Organization membership, Organization detail access, Project access, or permissions on resources inside a linked Organization.
Linked organizations
GET /partner/{partner_id}/organizations returns compact summaries containing the Organization ID, name, and creation time. The result is paginated.
Use the existing Organization and Project APIs for any action inside a client workspace. The caller must hold the required Organization or Project permission separately.
Administrator invitations
A Partner Admin invitation is valid for seven days. Acceptance requires a browser OIDC session whose server-verified email address matches the invitation.
Password, WebAuthn, OAuth access-token, API-key, and mixed-method sessions cannot accept a Partner Admin invitation. Acceptance is idempotent for the invited user. Expired invitations and invitations already accepted by another user return distinct error statuses.
Public API
The three read endpoints use bearer authentication and return only Partners visible to the caller. Invitation creation and Partner-to-Organization administration are internal operations and are not part of the public API reference.