---
title: "Cloud Platform Overview"
description: "Organizations, projects, apps, and role-based access control for Bloom Cloud."
category: "Cloud Platform"
url: "https://bloom-platform-ten.vercel.app/docs/cloud/overview"
last_updated: "2026-08-16"
---

# Cloud Platform Overview

> Bloom Cloud is the dashboard behind `bloom deploy`&mdash;organizations, projects, apps, builds, releases, and every piece of infrastructure OTA patching depends on. Open it at [cloud.bloom.dev](https://cloud.bloom.dev).

## Organization Hierarchy

Every resource in Bloom Cloud is scoped under a three-level hierarchy so teams, clients, and product lines stay cleanly isolated:

- **Organization**: The billing and membership boundary. Owns projects, seats, and a subscription plan.
- **Project**: Groups related apps&mdash;typically one product, one repository family.
- **App**: A single Flutter app&mdash;the unit builds, releases, environments, and secrets attach to.

## Linking a Project

```bash
# Link a local Bloom project to a Cloud app
bloom cloud link --org acme-inc --project storefront --app storefront-mobile

# Verify the link
bloom cloud whoami
```

## Role-Based Access Control

Roles are assigned per organization member and gate sensitive actions across every app in that org:

- **Owner**: Full control, including billing, org deletion, and member removal.
- **Admin**: Manage projects, apps, environments, and team membership. No billing or org deletion.
- **Release Manager**: Approve/reject releases, trigger deployments and rollbacks. Cannot touch secrets or signing.
- **Developer**: Trigger builds, view logs and releases. Cannot approve releases or manage secrets/signing.

## Audit Log

Builds, release approvals, secret rotations, signing identity changes, and rollbacks are all written to a per-organization audit trail, filterable by actor, resource, and date range from the `/audit-log` screen in the dashboard. Audit entries are immutable and retained for the lifetime of the organization&mdash;they cannot be edited or deleted by any role, including Owner.

## Related Documentation
- [Build & Release Pipeline](https://bloom-platform-ten.vercel.app/docs/cloud/build-and-release.md)
- [Secrets, Signing & Git](https://bloom-platform-ten.vercel.app/docs/cloud/secrets-and-signing.md)
- [Hosting, Observability & Automation](https://bloom-platform-ten.vercel.app/docs/cloud/hosting-and-automation.md)
- [Open Cloud Dashboard](https://cloud.bloom.dev)
