Organization

Beta

Organizations are in beta. Inviting teammates is switched on by Fil One for selected organizations, so what you see on this page depends on whether yours is one of them. Details may change before general availability.

Every Fil One account starts as a one-person organization, with you as its Owner. Everything about the organization itself (its name and logo, who is in it, what it pays, and what has happened in it) is reached from the organization menu at the top of the left sidebar.

The organization menu

The organization's logo and name sit at the top of the left sidebar. Click them to open the menu, which lists the organization's pages. You only see the entries your role can open:

Entry	What it opens	Who sees it
Edit organization	The organization's name and logo, and how to delete it (see Editing the organization)	Owner, Admin
Members	Everyone in the organization, and pending invitations (see Members)	Every role, beta only
Billing	Your plan, usage, payment method, and invoices (see Billing)	Owner, Admin
Audit log	A record of membership, key, and organization changes (see Audit log)	Owner, Admin, beta only

Each is a page of its own, at /edit-organization, /members, /billing, and /audit.

Below the pages, the menu lists your organizations if you belong to more than one (see Switching organizations), and, in the beta, Create organization.

While an organization has no active plan, every page except Settings, Edit organization, and Support is replaced by Add a payment method to continue, so Members, Billing, and Audit log are left out of the menu until a plan is in place. See Billing.

The organizations beta

Members, Audit log, Create organization, and sending invitations are part of the organizations beta, which Fil One switches on for selected organizations. Outside the beta those entries don't appear, and opening /members or /audit directly takes you to the dashboard. Edit organization and Billing are available to every organization. To ask about access, email support@fil.one.

Editing the organization

Edit organization, for Owners and Admins, opens a page with two sections:

• General holds the organization's logo and Organization name. A new logo saves as soon as it uploads. A new name needs Save, and must be 2 to 100 characters, using letters, numbers, spaces, hyphens, and periods only. Every member sees the change.
• Danger zone, shown to Owners only, covers deleting the organization (see Deleting an organization).

Members and Read only members who open the page see "Organization details are managed by your organization's owners and admins."

Creating another organization

In the beta, Create organization in the organization menu opens a dialog asking for an Organization name, with the same rules as above, and an optional logo. You become the new organization's Owner, and the console switches to it straight away. A new organization has its own members, keys, buckets, and billing, separate from the organization you created it from.

Roles and permissions

Every member holds exactly one of four roles. The role picker describes them like this:

Role	Description
Owner	Can do everything, including billing and owning the organization.
Admin	Can manage members, buckets, and keys, but not billing or owners.
Member	Can read and write objects, and create buckets and their own keys.
Read only	Can read buckets and objects, but can't make changes.

The full set of capabilities:

Capability	Owner	Admin	Member	Read only
See the member list	✅	✅	✅	✅
Invite members, change roles, and remove members (Admin and below)	✅	✅	—	—
Make someone an Owner, change an Owner's role, or remove an Owner	✅	—	—	—
Transfer ownership	✅	—	—	—
Rename the organization	✅	✅	—	—
View billing (plan, usage, invoices)	✅	✅	—	—
Manage billing (plan, payment method, Stripe portal)	✅	—	—	—
View and export the audit log	✅	✅	—	—
List buckets and read their settings	✅	✅	✅	✅
Create buckets	✅	✅	✅	—
Delete buckets	✅	✅	—	—
View and download objects	✅	✅	✅	✅
Upload objects	✅	✅	✅	—
Delete objects	✅	✅	✅	—
Create access keys	✅	✅	✅	—
See and revoke the keys you created	✅	✅	✅	—
See and revoke every key in the organization	✅	✅	—	—
Create keys with the PutObjectRetention or PutObjectLegalHold permission	✅	—	—	—

Read only members don't see API Keys in the sidebar, because they can't create or manage keys.

Roles apply in the console. Access keys carry their own permissions.

The S3 API has no users or roles. A request made with an access key is allowed or refused by that key's own permissions and bucket scope, whoever created it. What keeps keys in line with roles is a cap at creation: a key can only carry permissions its creator's role holds. For example, a Member can't create a key with DeleteBucket, and only an Owner can create one with PutObjectRetention or PutObjectLegalHold. When a member's role narrows, keys that go beyond the new role are revoked (see Changing a role).

Members

Members in the organization menu opens a page headed Members, "People with access to this organization." It has up to two tabs, each with a count beside its label:

Tab	What it holds	Who sees it
Members	Everyone in the organization and their role	Every role
Invitations	Invitations that have been sent but not yet accepted	Owner, Admin

Owners and Admins also get an Add member button beside the heading, which opens the invitation form (see Invitations).

The Members tab lists everyone in the organization:

Column	What it holds
Member	The member's name, a You badge on your own row, and their user ID underneath
Role	A role picker, if you can change this member's role, or a role badge otherwise
Joined	When they joined, with how: Signed up, Original account, or Invited (hidden on narrow screens)
⋯	Transfer ownership and Remove, for the members you can act on

With 5 or more members, a search box and a role filter appear above the table.

Changing a role

Owners and Admins change a role from the picker in the Role column. The picker only offers roles you're allowed to assign: an Admin can move people between Admin, Member, and Read only, but can't change an Owner's role or make anyone an Owner.

• Making someone an Owner asks you to confirm first, because they'll be able to manage billing, every member, and the organization itself, including removing you.
• Moving someone to a role with fewer permissions opens a preview of their access keys first. Any key that carries more than the new role allows is listed, and the confirm button becomes Change role and revoke. Those keys stop working straight away. To keep a client running, create a replacement key with the narrower permissions first, then change the role. Moving someone to Read only revokes every key they created, since Read only can't hold keys.
• Moving someone to a role with more permissions takes effect immediately.

You can change your own role too. The dialog warns you if the change takes away your ability to manage members or billing.

Removing a member

Choose Remove from the row's ⋯ menu and confirm with Remove member. The person loses access to the organization, and every access key they created is revoked, so anything still using one stops working straight away. Invitations they sent that are still pending are withdrawn too.

Admins can remove Admins, Members, and Read only members. Only an Owner can remove an Owner. Owners and Admins can remove themselves. Members and Read only members can't remove themselves, so ask an Owner or Admin.

At least one Owner

An organization always keeps at least one Owner. A role change or removal that would leave it with none is refused, and the page shows An organization keeps at least one owner. Make someone else an Owner, or transfer ownership, first.

Transferring ownership

An Owner can hand the Owner seat to another member with Transfer ownership in that member's ⋯ menu.

1. The dialog explains that the other member becomes Owner and you move to Admin, and that you can't take ownership back yourself.
2. If any of your access keys carry permissions an Admin can't hold (such as PutObjectRetention or PutObjectLegalHold), the dialog lists them. They're revoked as part of the transfer.
3. Type the organization's name to confirm, then click Transfer ownership. This cannot be undone.

Transferring needs a recent sign-in. If you haven't signed in within the last five minutes, the console sends you through sign-in again, including your two-factor check if you have one set up, and then reopens the dialog.

Billing is not affected: the subscription belongs to the organization, not to the Owner.

Invitations

Invitations are how anyone else joins your organization. Sending them needs an Owner or Admin role, and an organization in the beta. They're managed from the Invitations tab of the Members page.

Sending an invitation

1. Click Add member at the top of the Members page.
2. Enter the person's Email address.
3. Choose a Role. Each role is listed with its description, and the list only includes roles you can assign: an Admin can invite Admins, Members, and Read only members, and an Owner can also invite Owners. Member is selected by default.
4. Click Send invitation.

The person joins as soon as they accept, at the role you chose. The invitation link can only be used once, and expires in 14 days.

An organization can have at most 25 invitations pending at once. At the limit, revoke one to send another. Inviting an address that already has a pending invitation replaces the old one rather than taking a second slot.

If the invitation was created but the email couldn't be sent, the tab says so and offers Send again.

The Invitations tab

Column	What it holds
Email	The address invited, and when
Role	The role they'll join at
Status	Waiting, Not delivered (the email couldn't be sent), or Expired
Expires	When the link stops working (hidden on narrow screens)

Revoke withdraws an invitation, and the link stops working. Resend appears on invitations whose email was not delivered. You can only act on invitations for roles you're allowed to assign.

Accepting an invitation

The invitation email links to app.filone.com/invite/accept. If you're not signed in, you're asked to sign in first and then brought back. The page then shows one of these:

Outcome	What it means
Welcome to organization	You've joined. The page shows your role and what it lets you do, with Continue to organization.
You're already in organization	You were already a member.
Wrong account signed in	The invitation was sent to a different address than the one you're signed in with. Log out, sign in with the right address, and open the link again.
Verify your email address first	Your email isn't verified yet. Verify it, and you're brought back to accept.
This invitation is no longer valid	The link has already been used, was revoked, or has expired. Ask an administrator for a new invitation.

Switching organizations

If you belong to more than one organization, the organization menu lists them under Organization, sorted by name, with a check mark on the one you're in. Choosing another switches the console to that organization and opens its dashboard. With only one membership, the list doesn't appear.

The choice is kept per browser tab, so two tabs can be in different organizations at the same time. The sidebar names the organization you're in, so check it before removing people or transferring ownership.

Leaving an organization

The Organizations section of Settings lists every organization you belong to, with your role and when you joined. Each row's menu offers Switch to this organization and Leave organization. Leaving removes your access to that organization and everything in it, and you can only rejoin with a new invitation. The last Owner of an organization can't leave it: make someone else an Owner first (see At least one Owner).

Audit log

Audit log in the organization menu opens a page, for Owners and Admins, that records changes to the organization:

Column	What it holds
Event	What happened
Member	Who did it
Subject	What it was done to (hidden on narrow screens)
When	When it happened

Expand a row to see its details. Filter by date range (From, To), by event type (All events by default), and by member (Anyone by default).

Events recorded:

• Organization created, and organization renamed
• Member invited, invitation revoked, and invitation accepted
• Role changed, member removed, and ownership transferred
• Key created, key deleted, and key rotated
• Audit log exported

Download CSV exports the events that match your current filters. An export can hold up to 20,000 rows. A larger one is refused rather than cut short, so narrow the date range or filter by event type or member.

Events are kept for 90 days. If you ask for a range that reaches further back, the page tells you the older events have been removed.

Billing

Billing in the organization menu opens the billing page, for Owners and Admins. See Billing.

Deleting an organization

Deleting an organization is not available in the console yet. The Danger zone on the Edit organization page, shown to Owners only, points you to support@fil.one: email them to delete the organization.