- Org <-> User - User privs will differ per org - Invite users; NB existing users can be added to other organisations - Invited users can have granular permissions set