You
API keys
A key authenticates a machine — a Node-RED flow, a script — as the organization. An ingest key can send points to models this organization already has and cannot change or delete them; an admin key can do everything an administrator can. The secret is stored hashed, so it is shown once, here, and never again.
Users
Everyone who has signed in to this organization. An admin sees and manages every model in the organization; a viewer sees only their own. The first person to sign in became the admin — there was nobody else who could have appointed one — and the last admin cannot be demoted.
Models
Organizations waiting for a decision
This service is the owner tenant. An organization that signs in is recorded here and refused until somebody approves it — provisioning one for whoever knocks is how a multi-tenant service fills a disk with strangers.
All organizations
Every organization with a database. An organization that has lost its last admin cannot appoint one — promoting somebody is an admin's act — so that repair happens from here.
Your account
Set
ANOMALY_AUTH=1 with ANOMALY_OIDC_ISSUER and
ANOMALY_OIDC_CLIENT_ID to turn it on.