Automation recipes
Configure triggers. Let Authaz handle the rest.
When
User invited
A new member accepts an org invitation
Then
Assign default role
Apply tenant-specific role template automatically
When
Role changed
An admin updates a member's role
Then
Sync downstream permissions
Propagate permission changes to connected services
When
Member removed
A user is deprovisioned from the org
Then
Revoke all sessions
Terminate active sessions and invalidate tokens
When
Sensitive action detected
A billing or security scope change occurs
Then
Create audit ticket
Forward event to your SOC workflow automatically
Lifecycle stages
One model from first invite to final offboard
Onboard
Invite members, apply role templates, activate access -- all from a single event.
Operate
Delegate admin controls, enforce policy checks, and sync permissions in real time.
Offboard
Revoke sessions, clean up permissions, and generate compliance records on removal.
Developer SDK
Three calls. Full member lifecycle.
import { authaz } from "@authaz/sdk"; // Invite a member and let automation handle the rest await authaz.orgs.members.add({ orgId: "org_123", email: "new-admin@acme.com", role: "org_admin", }); // List current members with their roles const members = await authaz.orgs.members.list({ orgId: "org_123", include: ["role", "status", "lastActive"], }); // Remove a member -- sessions revoked automatically await authaz.orgs.members.remove({ orgId: "org_123", userId: "user_456", reason: "offboarding", });