What Is an Organization?
A Terraform Cloud Organization provides a shared environment where teams collaborate on infrastructure as code. When you sign up, you either create a new organization or join one via invitation. You must belong to at least one organization to work in Terraform Cloud.
- Users & Teams: Define who can access and manage resources.
- Workspaces: Isolated environments for Terraform runs.
- Private Module Registry: A private catalog for your Terraform modules and providers.
- Integrations: Connections to VCS, CLI, and APIs.
You can manage Organizations not only via the web UI or API but also through the Terraform
tfe provider—enabling infrastructure-as-code for your Terraform Cloud setup!Organization-Level Settings
Organization settings control access, governance, and integrations across all your workspaces.Below is an overview of key settings at the org level:
| Setting | Description |
|---|---|
| API Tokens | Personal or machine tokens to authenticate with the Terraform Cloud API. |
| Version Control Integration | Link to GitHub, GitLab, Bitbucket, or other VCS providers to trigger runs automatically. |
| Private Module Registry | Host and share Terraform modules across your organization. |
| Organization Variables | Define variables (Terraform inputs or environment vars) once and apply them to multiple workspaces. |
| Subscription Plan | Choose features in Free, Team & Governance, or Business tiers. |
| Users & Teams | Invite users, group them, and assign granular permissions. |
| Sentinel Policies | Apply policy sets for governance at global or workspace levels. |
| Tags & Permissions | Organize resources and control access with tags. |
Treat API tokens like secrets. Do not commit them to version control or expose them in public. Use environment variables or secret managers where possible.
Single vs. Multi-Organization Models
Terraform Cloud supports both single-organization and multi-organization deployments. Your choice depends on the level of isolation and governance required.
| Model | Use Case | Example |
|---|---|---|
| Single Org | Centralized management, simpler governance | 35K Airlines |
| Multi-Org | Strict isolation between divisions or business units | Big Food, Inc. (Pizza, Taco, Sandwich) |
User Accounts and Invitations
Terraform Cloud user accounts are tied to an email address and exist independently of any organization. After signing up, you can join one or more organizations. To add a user:- Send an email invitation from your org’s Users & Teams page.
- The recipient accepts the invite and is added to the team you specified.
Summary
Terraform Cloud Organizations form the foundation for collaboration and governance:- They group users, teams, and workspaces under a single tenancy.
- They centralize settings like VCS connections, module registries, variables, and policies.
- They support both single-org and multi-org strategies for different isolation requirements.