Members and invitations

An invitation names an email address and a role. It expires. Accepting it creates the membership; it never creates the permissions directly.

Removing somebody ends the membership and leaves their account alone, because the same account may belong to another organisation.