Discussion: Organization management

This will need to be split into multiple issues. Some points are relevant now, others are for later milestones.

There is a need to restrict users from creating/managing organization entities in both self-managed and SaaS:

• Creating organizations. Can my Org User create their own Org?
• Convert group to organization, which is the initial primary Organization creation flow. Who is allowed to do that?
• Prohibit transfer of a group to an organization. Maybe I'm a bit far ahead on this one. I add this here because it will be requested, and the mechanism will already be built within the "convert group to organization" solution.
• Destroy organizations. We should make an explicit decision here as we've skirted around this discussion until now.

There may be some combination of instance/org/hard-coded settings/policies here.

Some of these decisions will need to make their way in to our blueprint.