user_in_org: only fetch user record for cdb calls