You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: "Manage organizations, members, and org-level settings in Prism."
4
+
---
5
+
6
+
## About
7
+
8
+
Each Prism organization is an isolated environment with its own providers, routing rules, rate limits, budgets, and API keys. Organizations are the top-level unit for multi-tenancy in Prism.
9
+
10
+
---
11
+
12
+
## Organization settings
13
+
14
+
Organization config controls all gateway behavior for that org. Settings are managed via the dashboard or the admin API.
Organizations can have multiple members with different roles.
101
+
102
+
| Role | Permissions |
103
+
|---|---|
104
+
|**Owner**| Full access. Can delete the org, manage billing, and change all settings. |
105
+
|**Admin**| Can manage providers, keys, routing, budgets, and members (except owner). |
106
+
|**Member**| Can view config and create API keys. Cannot change org settings. |
107
+
|**Viewer**| Read-only access to dashboard, logs, and analytics. |
108
+
109
+
### Managing members
110
+
111
+
Members are managed through the Future AGI dashboard at **Settings > Members**. Invite new members by email. Each member can belong to multiple organizations.
112
+
113
+
---
114
+
115
+
## API key management
116
+
117
+
Each organization has its own pool of API keys (virtual keys). Keys inherit org-level settings and can have additional per-key restrictions.
118
+
119
+
```python
120
+
# List keys for an org
121
+
keys = client.keys.list(org_id="your-org-id")
122
+
for key in keys:
123
+
print(f"{key.name}: {key.key_prefix}...")
124
+
125
+
# Create a new key
126
+
new_key = client.keys.create(
127
+
org_id="your-org-id",
128
+
name="backend-service",
129
+
rate_limit_rpm=100,
130
+
allowed_models=["gpt-4o", "gpt-4o-mini"],
131
+
)
132
+
print(f"Key: {new_key.key}") # full key shown only at creation
133
+
134
+
# Revoke a key
135
+
client.keys.delete(key_id=new_key.id)
136
+
```
137
+
138
+
See [Virtual keys & access control](/docs/prism/concepts/virtual-keys) for detailed key configuration (RBAC, IP ACL, model restrictions).
139
+
140
+
---
141
+
142
+
## Multi-tenancy patterns
143
+
144
+
### One org per customer
145
+
146
+
For SaaS products, create a separate org per customer. Each customer gets isolated providers, budgets, and rate limits:
147
+
148
+
- Customer A: budget $100/month, access to gpt-4o-mini only
149
+
- Customer B: budget $500/month, access to gpt-4o and claude-sonnet-4-6
150
+
- Customer C: unlimited budget, all models
151
+
152
+
### One org with per-key isolation
153
+
154
+
For internal teams, use a single org with per-key restrictions:
155
+
156
+
- Marketing team key: rate limit 50 RPM, budget $200/month
157
+
- Engineering team key: rate limit 500 RPM, budget $1000/month
158
+
- Data science key: rate limit 200 RPM, all models, no budget cap
0 commit comments