Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
70 changes: 31 additions & 39 deletions content/manuals/admin/_index.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Administration
description: Overview of administration features and roles in the Docker Admin Console
keywords: admin, administration, company, organization, Admin Console, user accounts, account management
description: Overview of administration features and roles in Docker Home
keywords: admin, administration, company, organization, Docker Home, user accounts, account management
weight: 10
params:
sidebar:
Expand All @@ -19,54 +19,56 @@ grid:
description: Learn how to onboard and secure your organization.
icon: magnifying-glass-plus
link: /admin/organization/setup/onboard
- title: Company FAQ
description: Discover common questions and answers about companies.
icon: question-mark-circle
link: /faq/admin/company-faqs/
- title: Organization FAQ
description: Explore popular FAQ topics about organizations.
icon: question-mark-circle
link: /faq/admin/organization-faqs/
- title: Security
description: Explore security features for administrators.
icon: shield-check
link: /security/
link: /enterprise/security/
aliases:
- /docker-hub/admin-overview
---

Administrators can manage companies and organizations using the
[Docker Admin Console](https://app.docker.com/admin). The Admin Console
provides centralized observability, access management, and security controls
across Docker environments.
Organization and company owners can manage members, control access, and enforce
security across their Docker environments. You perform these tasks in Docker
Home, which provides centralized observability, access management, and security
controls.

As an organization or company owner, you can:

- Create and manage companies and organizations
- Assign roles and permissions to members
- Group members into teams to manage access by project or role
- Set company-wide policies, including SCIM provisioning and security
enforcement

## Company and organization hierarchy

The [Docker Admin Console](https://app.docker.com/admin) provides administrators with centralized observability, access management, and controls for their company and organizations. To provide these features, Docker uses the following hierarchy and roles.
To provide centralized administration, Docker organizes companies and
organizations into the following hierarchy and roles.

![Diagram showing Docker’s administration hierarchy with Company at the top, followed by Organizations, Teams, and Members](./images/docker-admin-structure.webp)

### Company

A company groups multiple Docker organizations for centralized configuration. Companies have the company owner administrator role available.

The company owner:

- Can view and manage all organizations within the company
- Has full access to company-wide settings and inherits the same permissions as organization owners
- Does not occupy a seat
A company groups multiple Docker organizations for centralized configuration. A
company owner can view and manage every organization in the company and its
company-wide settings, with the same access rights as an organization owner. For
the company owner role and how it affects seats, see
[Company roles](/manuals/admin/company/_index.md#company-roles).

Companies are only available for Docker Business subscribers.

### Organization

Organization owners have the organization owner administrator role available. They can manage organization settings, users, and access controls, but occupy a [seat](/manuals/admin/organization/organization-faqs.md#what-is-the-difference-between-user-invitee-seat-and-member).
An organization sits below the company and is where you group teams and
members and assign access to repositories. Every Docker Team and Business
subscriber has at least one organization.

- An organization contains teams and repositories.
- All Docker Team and Business subscribers must have at least one organization.
Organization owners hold the organization owner administrator role and manage
organization settings, users, and access controls. Each owner occupies a
[seat](/manuals/admin/organization/organization-faqs.md#what-is-the-difference-between-user-invitee-seat-and-member).

> [!TIP]
> [Upgrading to a Docker Business plan](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdmin) grants you the company owner role so you can manage multiple organizations.
[Upgrading to a Docker Business plan](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdmin)
grants you the company owner role so you can manage multiple organizations.

### Team

Expand All @@ -79,17 +81,7 @@ or functions.
A member is any Docker user added to an organization. Organization and company
owners can assign roles to members to define their level of access.

## Admin Console features

Docker's [Admin Console](https://app.docker.com/admin) allows you to:

- Create and manage companies and organizations
- Assign roles and permissions to members
- Group members into teams to manage access by project or role
- Set company-wide policies, including SCIM provisioning and security
enforcement

## Manage companies and organizations
## What's next

Learn how to manage companies and organizations in the following sections.

Expand Down
65 changes: 30 additions & 35 deletions content/manuals/admin/company/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,36 +3,20 @@ title: Company overview
linkTitle: Company
weight: 20
description: Learn how to manage multiple organizations using companies, including managing users, owners, and security.
keywords: company, multiple organizations, manage companies, admin console, Docker Business settings
keywords: company, multiple organizations, manage companies, Docker Home, Docker Business settings
grid:
- title: Create a company
description: Get started by learning how to create a company.
icon: building-office-2
link: /admin/company/new-company/
- title: Manage organizations
description:
Learn how to add and manage organizations as well as seats within your
company.
- title: Manage your company
description: Add organizations, manage company owners, and invite members.
icon: building-storefront
link: /admin/company/manage/organizations/
- title: Manage company owners
description: Find out more about company owners and how to manage them.
icon: user-group
link: /admin/company/manage/owners/
- title: Manage users
description: Explore how to manage users in all organizations.
icon: user-plus
link: /admin/company/manage/users/
- title: Configure single sign-on
description: Discover how to configure SSO for your entire company.
link: /admin/company/manage/
- title: Configure SSO and SCIM
description: Set up single sign-on and SCIM provisioning for your company.
icon: key
link: /enterprise/security/single-sign-on/
- title: Set up SCIM
description:
Set up SCIM to automatically provision and deprovision users in your
company.
icon: clipboard-document-check
link: /enterprise/security/provisioning/scim/
- title: Domain management
description: Add and verify your company's domains.
icon: check-badge
Expand All @@ -47,29 +31,40 @@ aliases:

{{< summary-bar feature_name="Company" >}}

A company provides a single point of visibility across multiple organizations,
simplifying organization and settings management.

A company provides a single point of visibility across multiple

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[MEDIUM] Word collision: "organizations" then "organization" in the same sentence

The sentence reads: "A company provides a single point of visibility across multiple organizations, for centralized organization and settings management."

The word "organization" (used here as a modifier meaning administrative structure) appears immediately after "organizations" (plural, referring to Docker organizations). A reader scanning the sentence must switch between two different senses of the same root word, which creates unnecessary friction.

Suggested rewrite:

A company provides a single point of visibility across multiple organizations, for centralized management of organizations and settings.

Or more concisely:

A company provides a single point of visibility and centralized management across multiple organizations.

organizations, for centralized organization and settings management.
Organization owners with a Docker Business subscription can create a company
and manage it through the [Docker Admin Console](https://app.docker.com/admin).
and manage it through Docker Home.

## Company structure

The following diagram shows how a company relates to its associated
organizations.

![Diagram showing how companies relate to Docker organizations](/admin/images/docker-admin-structure.webp)

## Key features
For the full administration hierarchy, see the
[administration overview](/manuals/admin/_index.md#company-and-organization-hierarchy).

## Company roles

A company includes one or more company owners. The creator of a company
becomes both a company owner and an organization owner, and occupies a seat
as organization owner. After creation, a company can have multiple owners,
and each owner has visibility across the entire company. They can manage
settings for every organization under it and have the same access rights as
organization owners.

With a company, administrators can:
- A company can have up to ten unique company owners.
- Company owners don't occupy a seat unless one of the following applies:
- They're added as a member of an organization under the company.
- SSO is enabled and the company owner signs in through SSO, which
automatically adds them as an organization member.

- View and manage all nested organizations
- Configure company and organization settings centrally
- Control access to the company
- Have up to ten unique users assigned to the company owner role
- Configure SSO and SCIM for all nested organizations
- Enforce SSO for all users in the company
To add or remove company owners, see
[Manage your company](/manuals/admin/company/manage.md#company-owners).

## Create and manage your company
## What's next

Learn how to create and manage a company in the following sections.

Expand Down
37 changes: 18 additions & 19 deletions content/manuals/admin/company/company-faqs.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: Company FAQs
linkTitle: FAQs
weight: 30
description: Company FAQs
description: Frequently asked questions about Docker companies, including subscriptions, seats, company owners, and permissions.
keywords: Docker, Docker Hub, SSO FAQs, single sign-on, company, administration, company management
tags: [FAQ]
aliases:
Expand All @@ -14,37 +14,36 @@ aliases:
### Some of my organizations don’t have a Docker Business subscription. Can I still use a parent company?

Yes, but you can only add organizations with a Docker Business subscription
to a company.
to a company. For more details, see [Add more organizations](/manuals/admin/company/manage.md#add-more-organizations).

### What happens if one of my organizations downgrades from Docker Business, but I still need access as a company owner?

To access and manage child organizations, the organization must have a
Docker Business subscription. If the organization isn’t included in this
subscription, the owner of the organization must manage the organization
outside of the company.
To access and manage a nested organization, it must have a Docker Business
subscription. If an organization downgrades from Docker Business, its owner must
manage it outside of the company. For more details, see
[Add more organizations](/manuals/admin/company/manage.md#add-more-organizations).

### Do company owners occupy a subscription seat?

Company owners do not occupy a seat unless one of the following is true:
Company owners don't occupy a seat unless one of the following is true:

- They are added as a member of an organization under your company
- SSO is enabled and the company owner signs in via SSO, which automatically adds them as an organization member

Although company owners have the same access as organization owners across all
organizations in the company, it's not necessary to add them to any
organization. Doing so will cause them to occupy a seat.
- SSO is enabled and the company owner signs in through SSO, which
automatically adds them as an organization member

When you first create a company, your account is both a company owner and an
organization owner. In that case, your account will occupy a seat as long as
you remain an organization owner.

To avoid occupying a seat, [assign another user as the organization owner](/manuals/admin/organization/manage/members.md#update-a-member-role) and remove yourself from the organization.
You'll retain full administrative access as a company owner without using a
subscription seat.
organization owner, so it occupies a seat as long as you remain an organization
owner. To free up that seat,
[assign another user as the organization owner](/manuals/admin/organization/manage/members.md#update-a-member-role)
and remove yourself from the organization. You keep full administrative access
as a company owner without using a subscription seat.

### What permissions does the company owner have in the associated/nested organizations?

Company owners can navigate to the **Organizations** page to view all their
nested organizations in a single location. They can also view or edit organization members and change single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) settings. Changes to company settings impact all users in each organization under the company.
nested organizations in a single location. They can also view or edit
organization members and change single sign-on (SSO) and System for
Cross-domain Identity Management (SCIM) settings. Changes to company settings
impact all users in each organization under the company.

For more information, see [Roles and permissions](/manuals/enterprise/security/roles-and-permissions.md).
121 changes: 121 additions & 0 deletions content/manuals/admin/company/manage.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,121 @@
---
title: Manage your company
linkTitle: Manage
weight: 20
description: Learn how to manage your company, including its organizations, owners, and members, using Docker Home.
keywords: company, manage company, multiple organizations, company owners, company members, Docker Home, add organization, resend invites
aliases:
- /admin/company/manage/organizations/
- /admin/company/manage/owners/
- /admin/company/manage/users/
- /admin/company/organizations/
- /admin/company/owners/
- /admin/company/users/
- /docker-hub/company-owner/
---

{{< summary-bar feature_name="Company" >}}

After creating a company, you can manage multiple organizations from Docker
Home. Company owners can use the company portal to invite users to specific

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[MEDIUM] Use "Docker Home" instead of "company portal"

The term "company portal" is not a defined Docker product name. The Docker style guide establishes "Docker Home" as the product name (formerly "Admin Console"). The sentence currently reads:

Company owners can use the company portal to invite users to specific organizations…

Suggest replacing "company portal" with "Docker Home":

Company owners can use Docker Home to invite users to specific organizations…

organizations, view seat availability across organizations, and add new
company owners.

## Add more organizations

Company owners can add Docker organizations with a Docker Business plan to
their company, so long as they're also the organization owners for that
organization. There's no limit to the number of organizations you add to a
company.

> [!IMPORTANT]
>
> Once you add an organization to a company, you can't remove it from the
> company.

1. Sign in to [Docker Home](https://app.docker.com) and select
your company.
1. Select **Managed organizations**.
1. Select **Add organization**, then choose an organization from the dropdown.

Check warning on line 39 in content/manuals/admin/company/manage.md

View workflow job for this annotation

GitHub Actions / validate (vale)

[vale] reported by reviewdog 🐶 [Docker.RecommendedWords] Consider using 'drop-down' instead of 'dropdown' Raw Output: {"message": "[Docker.RecommendedWords] Consider using 'drop-down' instead of 'dropdown'", "location": {"path": "content/manuals/admin/company/manage.md", "range": {"start": {"line": 39, "column": 70}}}, "severity": "INFO"}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[LOW] "dropdown" should be "drop-down" (hyphenated) for consistency

The new manage.md file uses "dropdown" (unhyphenated) in this step, while every other reference in the changed files and existing codebase uses the hyphenated form "drop-down" (e.g., "top-left account drop-down" in members.md).

Suggestion: change "from the dropdown" to "from the drop-down".


A nested organization must keep its Docker Business subscription to stay managed
by the company. If an organization downgrades from Docker Business, you can no
longer manage it through the company, and its owner must manage it separately.

## Company owners

A company can have multiple owners who manage the company and all of its
organizations. For details about the company owner role and how it affects
seats, see [Company roles](/manuals/admin/company/_index.md#company-roles).

### Add a company owner

1. Sign in to [Docker Home](https://app.docker.com) and select your company.
1. Select **Company owners**, then choose **Add owner**.
1. Specify the user's Docker ID, then finish by selecting **Add company owner**.

### Remove a company owner

1. Sign in to [Docker Home](https://app.docker.com) and select your company.
1. Select **Company owners**.
1. Find the company owner you want to remove and select the **Actions** menu,
then choose **Remove as company owner**.

## Company invitations

You add a user to your company by inviting them to an organization within the
company. Company owners can invite members to any organization in the company
using a Docker ID, email address, or in bulk with a CSV file of email addresses.

Members and invitations belong to individual organizations, not to the company
itself. A pending invitation occupies a seat in the organization the user is
invited to.

### Invite members to an organization

1. Sign in to [Docker Home](https://app.docker.com) and select your company.
1. Select **Users**, then choose **Invite**.
1. Choose how you want to invite members:
- To invite individual users, select **Emails or usernames**.
- To invite groups of users, select **CSV upload**.
1. Add user(s) to an organization by choosing **Select an organization**.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[LOW] "user(s)" is informal — write "users" or restructure the sentence

The parenthetical plural (s) is informal and inconsistent with documentation style. Since this step is about adding members in bulk or individually, "users" without the parenthetical works for both cases.

Suggestion: "Add users to an organization by choosing Select an organization."


Users receive invitations in their email with instructions to accept the
invitation. After accepting the invitation, new members appear on the
**Users** page. The table specifies how many organizations they're members of.

### Resend invitations

Company owners can resend invitations from the company-level **Users** page.
To resend individual invitations:

1. Select your company from [Docker Home](https://app.docker.com/).
1. Select **Users**, then locate the invitee from the users table.
1. Select the **Actions** menu, then choose **Resend**.
- Before resending, confirm you are resending the invitation to the correct
invitee.
- The resend invitation modal displays the date you originally invited the
invitee.
1. Choose **Invite** to confirm.

To bulk resend invitations:

1. From the users table, use the multi-select checkboxes next to the invitees
you want to invite.
1. Select **Resend invites**, then choose **Resend** to confirm.

## Add seats to an organization

If you have a self-serve subscription that has no pending subscription changes,
you can add seats using Docker Home. For more information about adding seats,
see [Manage seats](/manuals/admin/organization/manage/manage-seats.md#add-seats-to-your-subscription).

If you have a sales-assisted subscription, you must contact Docker support or
sales to add seats.

## Manage teams

Teams exist at the organization level, not the company level. After inviting
members to an organization, you can add them to teams within that organization.
For more details, see
[Manage members on a team](/manuals/admin/organization/manage/members.md#manage-members-on-a-team).
Loading