User can be granted all rights for a single organization