Skip to main content
Projects are the primary data isolation boundary in CDF. All objects in CDF belong to a single project, and objects in different projects are isolated from each other. Every CDF API request targets a specific project through the URL path /api/v1/projects/{project}/....

​
Projects and organizations

Projects belong to an organization. When you create a project, you assign it to one of the organization’s allowed clusters. The project inherits the organization’s OIDC configuration for authentication.
A project cannot be moved to a different cluster after creation.

​
Access control

Access within a project is managed through groups and capabilities. When creating a project, you can specify a projectAdminGroupId to designate which IdP group has admin access. If you don’t specify one, the project inherits the organization’s admin group.

​
Key capabilities

  • Create projects within an organization on a specified cluster
  • List projects in an organization
  • Configure OIDC settings inherited from the parent organization
  • Assign project admin groups to control administrative access
Last modified on April 23, 2026