Portal, organizations and projects
The portal is the central management interface of lionbackup. Here you manage organizations, projects, members, tokens and billing.
Sign-in
Sign-in is via single sign-on (Authentik) with multi-factor authentication (TOTP). The second factor is mandatory.
Organizations
An organization is the top-level management unit — typically your company. Projects, members and billing sit under it. Access is controlled through roles:
- Owner — full control, including billing and member management.
- Administrator — manages projects, tokens and members; no billing.
- Write — may upload backups.
- Read — may restore backups.
- Billing — invoices and payments only.
The roles are enforced both in the portal and at the API level.
Projects
Within an organization you create projects. A project bundles:
- the chosen region/storage zone,
- the retention period and, if applicable, WORN,
- the associated access tokens and quotas.
Access tokens
For automated use through the client software, project-scoped access tokens are issued. A token always belongs to exactly one project. If it is used outside that project, the anomaly detection reports this as an anomaly.
Use a dedicated token per use case, keep tokens in a secrets manager, and revoke tokens you no longer need in the portal.