Skip to main content
MITHUNAI organizations support multi-user collaboration governed by a four-tier Role-Based Access Control (RBAC) model. Organization Owners and Administrators can invite colleagues, designate appropriate permission boundaries, and revoke access instantly across both the graphical Web Console and the /arukz/api/v1/members HTTP API.

Role Permissions Matrix

Permissions are strictly bounded by organization scope. A member holds exactly one role within an organization:
The Principle of Non-Escalation: An Administrator cannot create an Owner API key or grant the Owner role to another user. You can only assign roles at or below your own privilege tier.

Inviting a Team Member

Via Web Console

  1. Navigate to Settings → Members in the console sidebar.
  2. Click Invite Member.
  3. Enter the colleague’s corporate email address.
  4. Select the target role (Administrator, Editor, or Member).
  5. Click Send Invitation. The user receives an email with an activation link.

Via HTTP API

Invite Member

Listing Organization Members

Retrieve all current members, active roles, and last sign-in timestamps:
List Members
Response

Revoking Membership & Session Termination

When an employee departs or changes responsibilities, revoking membership takes effect immediately:
  • Instant Active Session Invalidation: The user’s active JWT session tokens are invalidated at the gateway layer within milliseconds.
  • Zero In-Flight Access: Any pending or running queries initiated by the revoked user are terminated.
  • Audit Logging: The revocation event, timestamp, and revoking administrator’s ID are logged to the organization’s immutable audit log.
Last modified on September 27, 2026