Organization Types
Parent Organization is the top-level entity. It
supports all three user types and is the only level where Master access
applies.
Child Organization is a subordinate entity under a
Parent. It only supports Primary and Client users. Master access does not exist
here in any form, not in the UI, not in invite flows, not in edit flows.
The Three User Types
Primary is the owner-level user. Every organization
must have at least one. They cannot be deleted or disabled by anyone, not even
a Master user. They can optionally hold Client access (in any org) or Master
access (in a Parent org only), but their ownership privileges stay regardless.
Master is the super-admin role. They log in through a
dedicated Master Login and can operate across multiple organizations. They can
create orgs, manage users, and promote others to Master, but only within a
Parent organization. When a Master user navigates into a Child org, their
elevated controls disappear and they operate like a regular admin.
Client is the standard access role. They exist in
both Parent and Child orgs but have zero visibility into Master-level controls.
A Client user can be promoted to Master, but only in a Parent org and only by a
Master user. When that happens, their Client access is automatically removed, the two roles cannot coexist.