Skip to content

Organizations & members

Org creation provisions roles + seal + owner

Section titled “Org creation provisions roles + seal + owner”

When an organization is created (CreateOrganizationCommandHandler), the handler:

  1. Seeds three preset roles with axowl.* permission templates — ORG_OWNER (axowl.*), ORG_ADMIN, ORG_MEMBER (CreateDefaultRoles, :446). See Roles & permissions.
  2. Assigns ORG_OWNER to the owner’s ConnectedId (:231).
  3. For corporate onboarding, also assigns ORG_ADMIN to the author (a temporary admin who runs the setup wizard; their membership is deactivated at handoff but the role row is preserved for provenance) (:253).
  4. For independent orgs, generates an org master seal and an RSA token-signing key (:293).

SoleProprietorship, Corporation, SPC — independent vs. dependent (a dependent org uses its parent’s seal). Corporations/SPCs add a REPRESENTATIVE_DIRECTOR role.

The member lifecycle runs invited → pending → active → suspended/revoked.