Account and organization

Understand who can join a workspace and how the active organization shapes access.

Account paths

Staff join an existing organization through an invitation. Creating a new organization follows the registration gate: during a closed pilot it requires a valid code, while an open registration period may allow self-service organization setup. Patient access follows a separate pathway and may depend on a care provider adding or inviting the patient first.

Signing in with a password and signing in through Plannorium ID are separate authentication methods. Neither method should silently create an organization for an existing user. The active organization in the session determines the workspace in use.

More than one organization

An account may have membership in more than one organization. Switching the active workspace changes the organization context used by the application; it does not bypass role checks or grant access to a record outside that context.

Access is checked at the action

A visible page or menu item is not proof of permission. The server must validate the user, active organization, and required role or permission before returning data or changing a record.