Skip to main content

Organizations & Multi-Tenancy

Organizations are the foundation of Atria's multi-tenant architecture. Every event belongs to an organization, and organization members can collaborate on events together.

What is an Organization?​

An organization is a workspace where you and your team manage events. Think of it as your company, nonprofit, community group, or any entity that hosts events.

Key concepts:

  • Every user can belong to multiple organizations
  • Every event belongs to exactly one organization
  • Organizations provide data isolation - you only see your organization's data
  • Organization owners automatically have admin access to all organization events
  • You must create an organization before you can create events
Not Creating Events?

If you're joining Atria as an attendee, speaker, or team member, you don't need to create an organization. You'll be invited to existing organizations and events by organizers.

Organization Roles​

Atria uses a three-tier role hierarchy within organizations:

Owner​

Highest level of access - The organization founder or primary administrator.

Permissions:

  • Full control over the organization
  • Create events for the organization
  • Manage all organization events (automatic event admin access)
  • Invite members and change member roles
  • Promote members to owner status
  • Delete events they created (with strict verification)

Important: Every organization must have at least one owner. You cannot demote yourself if you're the only owner.

Admin​

Administrative access - Trusted team members who help manage the organization.

Permissions:

  • Create events for the organization
  • Manage all organization events (automatic event admin access)
  • Invite members and change member roles
  • View all organization data
  • Cannot promote members to owner (only owners can do this)

Member​

Standard access - Regular team members who participate in events.

Permissions:

  • View organization events
  • Participate in events they're invited to
  • View other organization members
  • Cannot create events
  • Cannot invite or manage other members

Creating an Organization​

To start hosting events on Atria, you'll need to create an organization first:

  1. Navigate to your Dashboard
  2. Click "Create Organization"
  3. Enter the organization name
  4. Click "Create"

You'll be set as the owner automatically and taken to your organization page, where you can start creating events.

Managing Organization Members​

Viewing Members​

To see who's in your organization:

  1. Go to your Organization Dashboard
  2. Click on the Members tab
  3. View all members with their roles and join dates

Inviting Users​

Only organization admins and owners can invite members.

Organizations support two ways to add members:

Option 1: Invite Individual Users​

To invite a single person (whether they have an Atria account or not):

  1. Go to Organization → Members
  2. Click "Invite Member"
  3. Enter their email address
  4. Select their role (Admin or Member)
  5. Add an optional personal message
  6. Click "Send Invitation"

The user will receive an email invitation with a secure link that expires in 7 days.

If they don't have an Atria account yet:

  • They'll be prompted to create an account when clicking the invitation link
  • After creating their account, they'll automatically join your organization

Option 2: Bulk Invitations​

Need to invite many people at once?

  1. Go to Organization → Members
  2. Click "Bulk Invite"
  3. Enter email addresses separated by commas
  4. Select the role for all invitees (Admin or Member)
  5. Add an optional message
  6. Click "Send Invitations"
Coming Soon

CSV and file upload support for bulk invitations is planned for a future release!

Accepting Invitations​

When you receive an organization invitation:

  1. Check your email for the invitation
  2. Click "Accept Invitation" in the email
  3. Log in (or create an account if you're new)
  4. Confirm you want to join the organization
  5. You're in! Start collaborating immediately

Managing Invitation Status​

Track your pending invitations:

As an Admin/Owner:

  • View pending invitations in Organization → Members (pending invitations section)
  • See who hasn't responded yet
  • Cancel pending invitations if needed
  • Resend invitations that expired

As a Member:

  • Members cannot view pending invitations
  • Only admins and owners have access to invitation management

As an Invitee:

  • View your pending invitations at /invitations
  • Accept or decline each invitation
  • See who invited you and when

Changing Member Roles​

Organization admins and owners can update member roles:

  1. Go to Organization → Members
  2. Find the member you want to update
  3. Click the "..." menu next to their name
  4. Click "Change Role"
  5. Select the new role (Owner, Admin, or Member)
  6. Confirm the change

Role change rules:

  • Admins can promote members to admin
  • Only owners can promote members to owner
  • Owners can demote admins to member
  • You can demote yourself (as long as there's another owner)
  • Cannot demote yourself if you're the only owner

Removing Members​

To remove someone from your organization:

  1. Go to Organization → Members
  2. Find the member to remove
  3. Click "Remove" next to their name
  4. Confirm the removal

Important: Removing a member:

  • Removes their access to organization events
  • Does NOT delete their Atria account
  • Does NOT remove them from events they were explicitly invited to
  • Cannot remove the last owner (must transfer ownership first)

Organization Settings​

Organization settings are accessed through the collapsible header panel on your organization page.

Accessing Settings​

  1. Go to your Organization Dashboard
  2. Look for the dropdown chevron (▼) in the header area next to your organization name
  3. Click the chevron to expand the settings panel
  4. You'll see cards for:
    • Organization Name - Edit your organization's display name
    • Mux Video Signing - Configure Mux streaming credentials
    • Jitsi Video Conferencing (JaaS) - Configure Jitsi meeting credentials

Updating Organization Name​

To change your organization's name:

  1. Expand the settings panel (click the chevron in the header)
  2. Find the Organization Name card
  3. Click "Edit Name"
  4. Enter the new name
  5. Click "Save Name"
Future Settings

Additional organization settings (logo, description, custom branding) are coming soon!

Mux Streaming Credentials​

If you plan to use Mux SIGNED playback for secure video streaming with analytics, you'll need to configure your organization's Mux credentials.

What is Mux SIGNED Playback?​

Mux SIGNED playback provides:

  • Secure video access - Token-based authentication prevents unauthorized sharing
  • Detailed viewer analytics - Track who watched, when, and for how long
  • Time-limited access - Tokens automatically expire after your session ends
  • Bring Your Own Account (BYOA) - Use your own Mux account and credentials
When Do You Need This?

You only need Mux credentials if you plan to use Mux SIGNED playback. Vimeo, Mux PUBLIC, and Zoom don't require any organization-level credentials.

Setting Up Mux Credentials​

Prerequisites:

  • A Mux account (free or paid tier)
  • Organization Owner or Admin role in Atria

Step 1: Get Your Mux Signing Key

Log into your Mux Dashboard:

  1. Get Signing Key ID & Private Key (required for SIGNED playback):

    • Go to Settings > Signing Keys
    • Click Create new signing key
    • Copy the Key ID and Private Key (save the private key - you can't retrieve it later!)

  2. Optional: Get Token ID & Secret (for future Atria-side analytics features):

    • Go to Settings > Access Tokens
    • Click Generate new token
    • Select Mux Video permissions
    • Copy the Token ID and Token Secret (save the secret - you can't retrieve it later!)
    • Note: These are not currently used but may enable additional analytics features in future releases

Step 2: Add Credentials to Atria

  1. Go to your Organization Dashboard
  2. Click the dropdown chevron (▼) in the header to expand settings
  3. Find the Mux Video Signing card
  4. Click "Add Credentials" (or "Update Credentials" if already configured)
  5. Enter the required signing key:
    • Mux Signing Key ID (required)
    • Mux Signing Private Key (required)
  6. Click "Save Credentials"

Security​

Credential Encryption:

  • All Mux credentials are encrypted using Fernet encryption before storage
  • Encryption uses the ENCRYPTION_KEY configured during installation
  • Credentials are only decrypted when generating playback tokens

Access Control:

  • Only organization Owners and Admins can access the credentials section
  • Credentials are NEVER viewable after entry - they're immediately encrypted
  • To update credentials, you must enter new values (can't retrieve old ones)
  • Credentials are never exposed to regular members or attendees
  • Each organization has separate, isolated credentials

Managing Credentials​

Updating Credentials:

  • You can update any or all credential fields at any time
  • Changes take effect immediately for new playback token generation
  • Existing videos with active tokens continue to work until tokens expire

Deleting Credentials:

  • Click Delete Credentials to remove all Mux credentials
  • This will prevent creating new sessions with Mux SIGNED playback
  • Existing sessions with SIGNED playback may stop working
  • To restore access, you must re-enter your Mux signing key

Testing Your Setup:

  1. After saving credentials, create a test session
  2. Select Mux as the streaming platform
  3. Choose SIGNED playback policy
  4. Add a Mux playback ID
  5. View the session page - video should play with analytics tracking

Troubleshooting​

"Invalid credentials" error:

  • Double-check all four credential fields are filled in correctly
  • Verify credentials are active in your Mux dashboard
  • Ensure there are no extra spaces in the credential values
  • Try regenerating credentials in Mux and re-entering them

Videos not playing:

  • Verify the playback ID is correct for your Mux asset
  • Check that the Mux asset exists and is ready (not still processing)
  • Ensure your Mux account is active and in good standing
  • Try using PUBLIC playback first to isolate the issue

Analytics not showing:

  • Analytics appear in your Mux dashboard, not in Atria
  • Wait a few minutes for data to populate
  • Ensure someone actually watched the video
  • Verify your Mux account tier includes analytics

Learn More​

Jitsi (JaaS) Credentials​

If you plan to use Jitsi embedded conferencing for interactive video sessions, you'll need to configure your organization's JaaS (Jitsi as a Service) credentials.

What is Jitsi (JaaS)?​

Jitsi as a Service (JaaS) provides:

  • Embedded video conferencing - Meetings embedded directly in Atria (unlike Zoom)
  • Per-user authentication - Unique JWT tokens for each attendee
  • Role-based moderator controls - Admins/Organizers get recording and livestreaming capabilities
  • Bring Your Own Account (BYOA) - Use your own JaaS account and credentials
When Do You Need This?

You only need JaaS credentials if you plan to use Jitsi for embedded conferencing. Vimeo, Mux, Zoom, and Other don't require JaaS credentials.

Setting Up JaaS Credentials​

Prerequisites:

  • A JaaS account at jaas.8x8.vc
  • Organization Owner or Admin role in Atria

Step 1: Get Your JaaS Credentials

Log into your JaaS Dashboard:

  1. Get your App ID:

    • Found on your JaaS dashboard
    • Format: vpaas-magic-cookie-xxxxxxxxxxxxx
    • This is your JaaS application identifier

  2. Get your API Key ID:

    • Go to API Keys section
    • Create a new API key or select existing
    • Copy the Key ID (this is the "kid" for JWT tokens)

  3. Get your Private Key:

    • When creating an API key, download the RSA private key
    • This is a PEM-encoded file starting with -----BEGIN RSA PRIVATE KEY-----
    • Save it securely - you can't retrieve it later!

Step 2: Add Credentials to Atria

  1. Go to your Organization Dashboard
  2. Click the dropdown chevron (▼) in the header to expand settings
  3. Find the Jitsi Video Conferencing (JaaS) card
  4. Click "Add Credentials" (or "Update Credentials" if already configured)
  5. Enter your credentials:
    • JaaS App ID (required) - Format: vpaas-magic-cookie-xxxxx...
    • JaaS API Key (required) - Your API Key ID
    • JaaS Private Key (PEM format) (required) - Paste the complete RSA private key
  6. Click "Save Credentials"

Security​

Credential Encryption:

  • All JaaS credentials are encrypted using Fernet encryption before storage
  • Encryption uses the ENCRYPTION_KEY configured during installation
  • Private key is only decrypted when generating JWT tokens

Access Control:

  • Only organization Owners and Admins can access the credentials section
  • Credentials are NEVER viewable after entry - they're immediately encrypted
  • To update credentials, you must enter new values (can't retrieve old ones)
  • Credentials are never exposed to regular members or attendees
  • Each organization has separate, isolated credentials

Managing Credentials​

Updating Credentials:

  • You can update any or all credential fields at any time
  • Changes take effect immediately for new token generation
  • Existing active sessions will continue working until tokens expire

Deleting Credentials:

  • Click Delete Credentials to remove all JaaS credentials
  • This will prevent creating new sessions with Jitsi
  • Existing Jitsi sessions may stop working
  • To restore access, you must re-enter your JaaS credentials

Testing Your Setup:

  1. After saving credentials, create a test session
  2. Select Jitsi as the streaming platform
  3. Enter a room name
  4. View the session page - Jitsi meeting should embed
  5. Verify moderators get appropriate controls

Moderator Permissions​

JaaS tokens include feature permissions based on Atria event roles:

Moderators (Admin/Organizer):

  • Recording (costs via JaaS billing)
  • Livestreaming to external platforms
  • File upload in Jitsi chat
  • Full participant management

Participants (Attendees, Speakers):

  • Standard video/audio participation
  • View participant list
  • No recording or livestreaming access

Troubleshooting​

"Invalid token" error:

  • Double-check all credential fields are filled in correctly
  • Verify private key includes full PEM content (including headers)
  • Ensure API key is active in your JaaS dashboard
  • Try regenerating credentials in JaaS and re-entering them

Meeting not loading:

  • Verify organization has JaaS credentials configured
  • Check room name is entered (minimum 3 characters)
  • Ensure "Jitsi" is selected as streaming platform
  • Check browser console for CSP or loading errors

No moderator controls:

  • Verify you have Admin or Organizer role in the event
  • Refresh page to get new token with current permissions
  • Moderator status is determined when token is generated

JaaS Costs​

JaaS has usage-based pricing. Key costs:

  • Video conferencing - Free tier available
  • Recording - Approximately $0.01/minute
  • Livestreaming - Standard streaming costs

Only moderators can initiate recordings, protecting against unexpected costs.

View pricing: jaas.8x8.vc

Learn More​

Cross-Organization Events​

Atria's multi-tenant architecture provides powerful collaboration features:

Organization Owner Privileges​

Automatic Event Access:

  • Organization owners and admins automatically have ADMIN access to all events in their organization
  • No need to explicitly add owners/admins to each event
  • Owners/admins can manage events without appearing in the attendee list

Flexible Visibility:

  • Owners/admins can access events invisibly (for management purposes)
  • Or they can be explicitly added to events to appear in attendee lists, speaker rosters, etc.
  • This gives organizers flexibility to manage behind the scenes or participate publicly

Event Membership for Members​

For Regular Members:

  • Must be explicitly invited to events
  • Event creators can invite organization members with specific roles
  • Members can see organization events but need explicit invitation to participate

Example Workflow​

Organization: "Tech Conference Inc"
├─ Owner: Alice (auto-admin on all events)
├─ Admin: Bob (can create events, needs invitation to edit existing ones)
└─ Member: Charlie (can view org events, needs invitation to participate)

Event: "DevCon 2025"
├─ Alice: ADMIN (automatic as org owner)
├─ Bob: ORGANIZER (explicitly invited)
└─ Charlie: ATTENDEE (explicitly invited)

Data Isolation & Security​

Atria implements strict data isolation between organizations:

What's Isolated​

  • Events - Only your organization's events are visible
  • Members - Cannot see members of other organizations
  • Sessions - Session data scoped to organization events
  • Sponsors - Sponsor data tied to organization events
  • Chat Rooms - Chat rooms scoped to specific events
  • Invitations - Organization invitations are organization-specific

What's Shared​

Some data crosses organization boundaries by design:

  • User Profiles - Users can belong to multiple organizations
  • Connections - You can connect with people from other organizations through events
  • Direct Messages - Can message connections from any organization (connections must be made through events)

Security Features​

  • Database-level isolation - Foreign key constraints enforce data boundaries
  • API authorization - Every endpoint verifies organization membership
  • Role-based access control - Granular permissions at org and event levels
  • Service-layer validation - Business logic re-verifies permissions (defense in depth)

Transferring Ownership​

Need to make another member an owner?

  1. Go to Organization → Members
  2. Find the member you want to promote
  3. Click the "..." menu next to their name
  4. Click "Change Role"
  5. Select "Owner"
  6. Confirm the change

After promoting someone to owner, you can demote yourself:

  1. Have another owner change your role to Admin or Member
  2. Or demote yourself using the same role change process

Important:

  • Only owners can promote members to owner
  • You cannot demote yourself if you're the only owner
  • Multiple owners can co-exist in an organization

Deleting an Organization​

Not Yet Available

Organization deletion is not currently available. We're working on a safe solution that properly handles cascading data and preserves important event history.

If you need to remove or archive an organization, please contact us at steven@sbtl.dev.

Best Practices​

For Organization Owners​

  • Add at least two owners - Prevents lockout if one owner is unavailable

  • Use clear naming - Name your organization clearly (e.g., "Acme Corp" not "My Org")

  • Audit members regularly - Remove inactive members to keep your org secure

  • Set role expectations - Communicate what each role means in your organization

For Admins​

  • Invite thoughtfully - Only invite people who need access

  • Use appropriate roles - Don't over-permission; give minimum necessary access

  • Document your events - Use clear event names and descriptions

For Members​

  • Respect permissions - Don't request role escalation unless needed

  • Communicate with admins - Ask questions if you need access to something

  • Keep profile updated - Your organization benefits from accurate member profiles

Common Questions​

Can I belong to multiple organizations?​

Yes! Users can be members of unlimited organizations. Switch between them using the organization selector in your dashboard.

Can I create events in multiple organizations?​

Yes, as long as you have the appropriate permissions in each organization. Each event belongs to exactly one organization.

What happens if I leave an organization?​

  • You lose access to all organization events (unless explicitly invited before leaving)
  • Your Atria account remains active
  • Your connections made at organization events remain
  • Event attendance history is preserved

Can I merge two organizations?​

Not currently. If you need to consolidate organizations, you'll need to:

  1. Manually move events by recreating them in the target organization
  2. Re-invite members to the target organization
  3. Remove members from the old organization

Organization deletion is not yet available. Contact us at steven@sbtl.dev if you need help managing old organizations.

Do organization members see each other's profiles?​

Yes, organization members can see each other's account emails and roles. All members in an organization can view the email addresses of all other members, regardless of role.

Important: The email displayed is your actual account email (the one you use to log in), not your public email preference. Currently, there are no privacy controls for hiding your email from other organization members.

Next Steps​

Now that you understand organizations, learn how to:

Questions? Contact us or open an issue.