It owns organization units, organizational hierarchy, functions, and account-held function assignments. These facts exist independently of authentication and authorization. IDM can import them, Identity can link them to people/accounts, and Access can project them into roles and rights.

Boundary

Organizations owns:

tenant-local organization units
parent/child organizational hierarchy
functions in organization units
whether a function may be delegated or used for acting in place
account-held function assignments
whether an assignment applies only to one unit or also to subunits

Organizations does not own:

login accounts or identity lifecycle
role and permission evaluation
postboxes, workflows, portals, files, or cases
external IDM connector internals

Module Contract

The module registers the organizations.directory capability from govoplan_core.core.organizations.

Feature modules should consume the capability instead of importing organization ORM models.

Development Install

From the core checkout:

cd /mnt/DATA/git/govoplan-core
./.venv/bin/python -m pip install -e ../govoplan-organizations