Working with Teams
Infrastructure is a team responsibility. RasnuCloud is built for the entire team — from the engineer making changes to the founder who needs to see what's happening without being able to break anything.
Organizations
When you sign up, RasnuCloud creates an Organization — your team's shared workspace. All servers, conversations, migration plans, and audit history live inside your organization. You control who has access and at what level.
You can create multiple organizations — useful for agencies managing infrastructure for multiple clients, or companies that want strict separation between environments.
Access Levels
Every team member is assigned a role. Roles are cumulative — each role includes everything below it.
| Role | What They Can Do |
|---|---|
| Viewer | See servers, read conversation logs, view the audit trail. Cannot make any changes. |
| Operator | Everything a Viewer can do, plus: start AI conversations, execute commands, manage deployments. |
| Admin | Everything an Operator can do, plus: add/remove servers, manage team members and their roles. |
| Owner | Full control. Manage billing, organization settings, and security policies. |
Inviting Your Team
- Go to Organization Settings → Team
- Enter your team member's email and choose their role
- They receive an invitation link — if they already have a RasnuCloud account, they join instantly
The Audit Trail
Every action in RasnuCloud is recorded — permanently, and in detail. This isn't just a log. It's a full history of every change ever made to your infrastructure through RasnuCloud.
The audit trail captures:
- Every AI conversation started and by whom
- Every command executed, with its full output and result
- Every file viewed or edited via the File Browser
- Every server added or removed
- Every team member invited or role changed
- Every API access event
- Every billing event
The audit trail is immutable — not even organization owners can delete or alter records. It's your source of truth for compliance, incident investigation, and accountability.
Access it from Audit Logs in the left sidebar. Filter by team member, server, date range, or action type.
IP Allowlisting
For organizations that require strict network security, you can restrict all access to RasnuCloud — both the dashboard and the API — to specific IP addresses or CIDR ranges.
This applies to everything
Once IP allowlisting is active, any request from an IP not on your list is rejected — including API calls from CI/CD pipelines. Add all relevant IPs before enabling this.
Configure this in Organization Settings → Security → IP Allowlist.
Two-Factor Authentication
2FA is supported for every account, using any standard authenticator app (Google Authenticator, Authy, 1Password, and others). Each team member enables it from their Profile page.
Organization owners can enforce 2FA across all team members from Organization Settings → Security, making it a hard requirement before anyone can access the dashboard.