Use same structure for create and read
could username be the email? its unique
do we need this?
the uid of the org this user might belong to
permissions types for users
successful operation