A user is identified with an email uniq address. A User can be part of several Organizations.
An organization identifies a set of users and rights. An organization has several projects and can create several role accounts. Each organization as a product plan.
A project identifies a web site, a web app, a microservice, an API... Users of the organization can be assigned to projects with specific rights.
An environment identifies a cloud execution configuration.
Role accounts can be used by CI to automatize test workflows or deployments.