Members & Roles
NuxtBase ships with three organization roles:
owneradminmember
These roles are configured in the Better Auth organization plugin and then enforced again through UI behavior and server-side guards.
What the Roles Mean in Practice
Section titled “What the Roles Mean in Practice”The owner is the highest organization role in normal product flows.
Owners can:
- manage members
- manage invitations
- manage teams
- manage billing
- perform owner-only organization actions
Admins are managers, but not owners.
In the current template, admins can:
- manage members
- manage invitations
- manage teams
- manage billing
But they are still blocked from owner-only actions.
Member
Section titled “Member”Members are regular organization users.
Members can use organization-scoped product features, but they do not get manager controls in the team-management screens.
The Frontend Manager Check
Section titled “The Frontend Manager Check”In the dashboard UI, “manager” behavior is computed from the current organization membership.
The key frontend rule is:
ownerandadmin-> managermember-> not a manager
This is what drives buttons like:
- invite member
- resend invite
- cancel invite
- create team
- rename team
- remove team
The Backend Guard Layer
Section titled “The Backend Guard Layer”The template also enforces organization role checks on the server.
Important guards include:
requireActiveBillingManager()requireOrganizationManager()requireOrganizationOwner()
So even if you accidentally expose a UI action, the server still protects the mutation path.
Role-Specific Examples
Section titled “Role-Specific Examples”Billing
Section titled “Billing”Billing management allows:
owneradmin
and rejects regular members.
Owner-Only Organization Actions
Section titled “Owner-Only Organization Actions”Some organization actions are explicitly owner-only. The server returns:
Only the organization owner can perform this actionfor non-owner attempts.
What the Members Page Supports
Section titled “What the Members Page Supports”On the dashboard members page, managers can:
- invite a new member
- choose
memberoradminfor the invitation - toggle an existing member between
memberandadmin - remove an existing member
The page intentionally prevents manager actions on:
- the current signed-in user
- the
ownerrow
That makes the default behavior safer than a fully open member table.