# Organization Structure

## Introduction

Cloud4.ai provides a comprehensive organization structure to efficiently organize the development of modern software products. The organization structure comprises several key components:

<figure><img src="/files/FH2rAjEdsxkSKpfZOSSm" alt=""><figcaption></figcaption></figure>

## Users

<figure><img src="/files/bcGLC7fIr9NgYPvrW0ji" alt=""><figcaption></figcaption></figure>

### Root User (Management Account)&#x20;

The Root User, also known as the Management Account, holds the highest level of access within the organization. This user has unrestricted access to all services and resources within the organization.

### Virtual Users

Virtual Users are users created within the organization with a limited set of permissions depending on the group they are assigned to. These users are designed to fulfill specific roles or tasks within the organization and have restricted access compared to the Root User. Virtual Users sign in using their Service Identity Code (SIC) instead of an email address.

### Invitations

Organization administrators can invite Virtual Users to the system by directly connecting them to selected groups. Invitations are sent out to specified email addresses and include instructions for the Virtual Users to access the organization's resources.

### Sign In

* **Root User**: The Root User signs in using their e**mail address and password**. They have access to all services and resources within the organization.
* **Virtual Users**: Virtual Users sign in using their [Service Identity Code (SIC)](/concept/sic-service-identity-code.md), which uniquely identifies them within the organization. They have limited permissions based on the group they are assigned to.

## API Credentials

API Credentials are used to authenticate and access Cloud4.ai services programmatically. They consist of a Client ID and Client Secret, which are securely stored and used to authenticate API requests. The format of API credentials is as follows:

<figure><img src="/files/srOm4fqZYwD0hwnHm335" alt=""><figcaption></figcaption></figure>

> 💡 **Note:**  Read more about API credentials usage and Authentication approach in [SDK Authentication](/sdk/authentication.md)

## Groups

Projects are used to segregate billing and limit resources for each environment within the organization. By organizing resources into projects, users can effectively manage and track usage and costs associated with specific projects or environments.

<figure><img src="/files/gqZ6OKNfjRfKg65I3Uqb" alt=""><figcaption></figcaption></figure>

## Permissions&#x20;

The full list of permissions can be found during the group creation process in the relevant tab:&#x20;

<figure><img src="/files/QZ9iQKd3GAtkx1jZ1EDz" alt=""><figcaption></figcaption></figure>

## Projects&#x20;

Projects in Cloud4.ai represent environments or specific initiatives within the organization. Each project can have its own set of resources, permissions, and billing settings. Services within Cloud4.ai are attached to projects, allowing for better organization and resource management.

<figure><img src="/files/ZOPk25u9lJnDPrdtMEaR" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloud4.ai/concept/organization-structure.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.