Organization Management
Organizations are the top-level workspace in Backstack where you manage team members, configure tools and services, and control access to your AI infrastructure.What is an Organization?
An organization in Backstack provides:- Team management - Invite and manage members with role-based permissions
- Shared resources - Tools, services, and AI providers available to all members
- Security controls - Policies, client restrictions, and access management
- Analytics - Usage insights and reporting across your team
Organization Roles
Backstack uses three role levels to control access:| Role | Capabilities |
|---|---|
| Owner | Full organization control - can manage all users, settings, and resources |
| Admin | Can manage users, configure settings, install services, and set security policies |
| Member | Can use organization resources but cannot manage users or configuration |
Organization features are only accessible to users with Admin or Owner roles.
Managing Team Members
Viewing Organization Users
Access user management:- Navigate to Organization → Users in the sidebar
- View two tabs:
- Active Users - All current organization members
- Pending Invitations - Invitations sent but not yet accepted
- Name and email address
- Role badge (OWNER, ADMIN, MEMBER)
- Join date
- Remove option (except for yourself)
Inviting New Members
Add team members to your organization:- Go to Organization → Users
- Click the Invite User button
- Enter the new member’s email address
- Select a role:
- Member - Basic access to use organization tools
- Admin - Can manage users and configure organization settings
- Owner - Full administrative control
- Click Send Invitation
Managing Invitations
Track and manage pending invitations:- Go to the Pending Invitations tab
- View all sent invitations that haven’t been accepted
- Revoke an invitation if needed by clicking the remove icon
Removing Users
Remove a team member from your organization:- Go to Organization → Users
- Find the user in the Active Users list
- Click the remove icon next to their name
- Confirm the removal in the dialog
Organization Settings
MCP Tool Routing
Control how your organization’s tools are exposed to external AI clients:- Navigate to Settings → MCP Tool Routing
- Toggle Smart Tool Routing:
- Enabled (recommended) - External MCP clients receive a single intelligent routing tool that automatically selects the right tool for each task
- Disabled - All tools are exposed directly, which can overwhelm the AI’s context window
AI Providers
Configure AI providers that members can use:- Go to Organization → AI Providers
- Click Add Provider to configure a new AI provider
- Enter provider details and API keys
- Enable or disable providers as needed
- View supported models for each provider
API keys are stored securely and never displayed after initial configuration.
Security & Client Restrictions
Control which AI clients can access your organization:- Navigate to Organization → Security → Client Restrictions
- View the list of available AI clients grouped by vendor
- Use quick actions:
- Block All - Prevent all clients from accessing organization data
- Allow All - Permit all clients (default)
- Or block/allow individual clients (Claude Desktop, Cursor, Continue, etc.)
Multi-Organization Membership
Users can be members of multiple organizations:Switching Organizations
- Click your profile avatar in the top-right corner
- Select the organization icon in the dropdown
- View your current organization
- Switch to another organization if you’re a member of multiple
Best Practices
User Management
- Use appropriate roles - Grant Admin access only to users who need to manage the organization
- Review members regularly - Remove users who no longer need access
- Track pending invitations - Follow up on invitations that haven’t been accepted
- Document roles internally - Maintain a list of who has admin access and why
Security
- Enable Smart Tool Routing - Reduces security surface area by limiting exposed tools
- Use client restrictions - Control which AI clients can access your data
- Configure security policies - Set organization-wide security rules (see Security Policies documentation)
- Limit Owner role - Keep the number of Owners minimal for better accountability
AI Providers
- Centralize API keys - Configure AI providers at the organization level rather than having users manage their own keys
- Monitor usage - Use analytics to track AI provider usage across your team
- Rotate keys regularly - Update API keys periodically for security
- Test before enabling - Verify AI provider configuration works before making it available to all users

