Organizations and roles
In SwiftFS Cloud, everything (buckets, access keys, usage, invoices) belongs
to an organization. You can belong to several, each with its own role, and
switch between them in the console. Each has its own address:
/console/<url-name>.
Roles
| Role | Can |
|---|---|
| Viewer | See buckets, objects, members and usage, and download objects |
| Developer | Also create buckets, upload and delete objects, and create and revoke their own access keys |
| Admin | Also rename the organization, invite and manage members (except owners), revoke anyone's keys, see the activity log, and manage billing |
| Owner | Everything, including managing other owners |
An organization always keeps at least one owner. A member who is removed, or becomes a viewer, loses their access keys immediately.
Inviting members
Owners and admins invite by email from Members, choosing the role. The invitation is valid for 7 days, and the person accepts it signed in with that email address (signing up first if they need to). Admins can invite anyone except owners.
The activity log
Settings → Activity (owners and admins) lists security-relevant actions: sign-ins, membership and role changes, buckets created and deleted, objects deleted through the console, and access keys created and revoked, with who did it, when, and from which IP address. Actions taken by S&S Labs on your organization appear as SwiftFS operator.
Suspension
S&S Labs may suspend an organization, for example for an invoice long past due. While suspended, its data can still be read, downloaded and deleted, but nothing can be uploaded or created; the console says so and why. Uploads work again as soon as the suspension is lifted.