organization-best-practices

Configure multi-tenant organizations and access control with Better Auth.

9|2|Updated Nov 10, 2025
One-click install
npx skills add https://github.com/FindMalek/dukkani --skill organization-best-practices-findmalek
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: organization-best-practices
Source: https://github.com/FindMalek/dukkani/tree/main/.cursor/skills/organization-best-practices
Command: npx skills add https://github.com/FindMalek/dukkani --skill organization-best-practices-findmalek

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. The goal is to provide scalable governance and secure access control for apps with multiple tenants and teams.

Core Features & Use Cases

Core features include multi-tenant organization setup, member and invitation management, customizable roles and permissions, team management, and RBAC integration with the Better Auth plugin. Typical use cases include onboarding new companies, granting admin or member access, structuring teams for different departments, and enforcing access rules across services.

Quick Start

Add the organization() plugin to your server configuration, attach the organizationClient() plugin to your client, run migrations with the CLI, and verify the organization tables exist in your database.

Frequently Asked Questions about organization-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up multi-tenant organizations with Better Auth?

Multi-tenant organizations in Better Auth are set up by adding the organization() plugin to your server configuration and the organizationClient() plugin to your client. You then run CLI migrations and verify the organization tables exist in your database.

What is RBAC and how does it work for application teams?

RBAC, or role-based access control, works by defining custom roles and permissions assigned to members within an organization. It enforces access rules across services by structuring teams for different departments and governing secure member invitations.

Can I define custom roles and permissions for organization members?

Yes, you can define custom roles and permissions for organization members. The Better Auth organization plugin allows you to manage members, grant admin or member access, and customize roles to enforce specific access rules across your application.

How do I manage member invitations for a multi-tenant application?

Member invitations for a multi-tenant application are managed through the Better Auth organization plugin. It handles the invitation lifecycle, allowing you to invite new companies and onboard users by granting specific admin or member access levels.

Does the Better Auth organization plugin support team-based permissions?

Yes, the Better Auth organization plugin supports team-based permissions. It enables team management so you can structure teams for different departments and enforce granular access rules across services within your multi-tenant application.

What's the best way to structure teams and access control for multiple tenants?

The best way to structure teams and access control for multiple tenants is using Better Auth's organization plugin to apply RBAC. This involves creating organizations, defining custom roles, managing member invitations, and grouping users into teams for scalable governance.