This covers cases where users are or are not members of organizations as well as whether or not they should have access to the application based on their organization membership.