Organization ID or name
DefaultOrgMemberRoles, when non-nil, replaces the org's default member roles.
OK
DefaultOrgMemberRoles are unioned into every member's effective roles at request time. Changes propagate to all members on the next request.