Organization Applications

Endpoints for managing organization registration applications.

Permission Model:

  • Apply: Any authenticated user can submit applications
  • Approve/Reject: Requires ADMIN role
  • Cancel: Requires resource-level permission on the application
  • View Pending: Requires ADMIN role

Application Lifecycle:

  1. User submits application → PENDING
  2. Admin approves → APPROVED (triggers onboarding)
  3. Admin rejects → REJECTED (with reason)
  4. User cancels → CANCELLED

Onboarding Process (triggered on approval):

  • Organization entity created
  • Audit record initialized
  • Default operator user created with generated credentials
  • Owner permissions assigned
  • Email with credentials sent (async)