users/orgs should also be an array of string