# Administration

### Organizations

Each DBNL deployment corresponds to a single Organization containing:

* All Namespaces
* All Users

### Namespaces

A Namespace is a unit of isolation within an Organization containing:

* [Projects](https://docs.dbnl.com/v0.29.x/workflow/projects)
* [Data Connections](https://docs.dbnl.com/v0.29.x/configuration/data-connections)
* [Model Connections](https://docs.dbnl.com/v0.29.x/configuration/model-connections)
* [Notification Connections](https://docs.dbnl.com/v0.29.x/configuration/notification-connections)

Namespaces can be created by Organization Admins from the Admin Dashboard.

{% hint style="info" %}
All Organizations start with a namespace named `default`. This namespace cannot be modified or deleted. Upon creation, all users have read and write permissions in this namespace.
{% endhint %}

### Users

Users are individuals with a login to an Organization and are defined by Roles related to the Organization and one or more Namespaces.

Users can be created from the Organization or Namespace Admin Dashboard.

{% hint style="warning" %}
The DBNL [Sandbox Deployment](https://docs.dbnl.com/v0.29.x/platform/deployment/sandbox) only contains a single user. For fuller Organizational controls please consider a full [Deployment](https://docs.dbnl.com/v0.29.x/platform/deployment).
{% endhint %}

### Roles

There are currently three Roles that can be assigned to a User:

* **Organization Admin:** This User has read and write permissions for all Organization level resources and are the only Users that can create Namespaces. Only other Organization Admins can create or remove Organization Admins. By default, the first user in an Organization is assigned the Organization Admin Role.
* **Namespace Admin:** This User has read and write permissions for all Namespace level resources. They can create new Namespace Writer users and invite them to their Namespace. By default, when an Organization Admin creates a Namespace they become a Namespace Admin of that Namespace.
* **Namespace Writer:** This User can create, read, and write to Projects in their Namespace. Namespace Writers can be created by Organization Admins or Namespace Admins.

Roles can be modified from the Organization or Namespace Admin Dashboard.