Organizations & roles
Owner, Admin, Member, Guest.
An organization is the top-level container in Skeleton Key. Brands belong to organizations, and you add team members at the org level. Every person on your team has one of four roles: Owner, Admin, Member, or Guest.
The four org roles
| Role | What they can do | What they can't do |
|---|---|---|
| Owner | Full control: invite and remove members, change member roles, manage brands, access billing, change org name | You cannot reassign the Owner role to another user |
| Admin | Invite and remove members, change member roles (except owner), generate team codes, manage brand teams across the org | Change org name, access billing |
| Member | View the Members and Brands pages of org settings; see who's on the team | Invite, change roles, or remove members |
| Guest | Access brands an Admin has explicitly given them | See the Members or Brands pages of org settings |
A single user account can only be the Owner of one organization. This prevents a person from holding full billing and admin control across multiple orgs simultaneously. You can be an Admin, Member, or Guest of as many other organizations as you're invited to.
Org Owners and Admins automatically have Admin-level brand access on every brand in the organization. They don't need to be added to individual brands. Members and Guests only see brands that an Admin has explicitly added them to, and any brand a Guest is added to assigns them the Viewer role.
Multi-organization membership
When you belong to more than one organization, an org switcher appears in the sidebar so you can move between them. Each org has its own brands, members, and billing, so switching orgs changes the entire workspace context. If you only belong to one org, the switcher doesn't appear.
Brand vs. organization roles
Org roles and brand roles control different things. Your org role governs org-level actions: who can invite members, who can access billing, who can change org settings. Your brand role governs what you can do inside a specific brand's workspace (edit outputs, run agents, view-only access, etc.). For details on what each brand role allows, see Brand permissions. The two systems intersect in one place: org Owners and Admins automatically have brand Admin access on every brand in the org. Members and Guests don't get that automatic access. An Admin must add them to each brand individually.
Last updated: 2026-04-27