/arukz/api/v1/members HTTP API.
Role Permissions Matrix
Permissions are strictly bounded by organization scope. A member holds exactly one role within an organization:The Principle of Non-Escalation: An Administrator cannot create an Owner API key or grant the
Owner role to another user. You can only assign roles at or below your own privilege tier.
Inviting a Team Member
Via Web Console
- Navigate to Settings → Members in the console sidebar.
- Click Invite Member.
- Enter the colleague’s corporate email address.
- Select the target role (
Administrator,Editor, orMember). - Click Send Invitation. The user receives an email with an activation link.
Via HTTP API
Invite Member
Listing Organization Members
Retrieve all current members, active roles, and last sign-in timestamps:List Members
Response
Revoking Membership & Session Termination
When an employee departs or changes responsibilities, revoking membership takes effect immediately:- Instant Active Session Invalidation: The user’s active JWT session tokens are invalidated at the gateway layer within milliseconds.
- Zero In-Flight Access: Any pending or running queries initiated by the revoked user are terminated.
- Audit Logging: The revocation event, timestamp, and revoking administrator’s ID are logged to the organization’s immutable audit log.