the users endpoint is not org scoped by the way