Projects
A project is the container every configuration object belongs to, and one of the two access-control boundaries. What belongs in one, and where to draw the line.
Members and roles
What the project role decides and what it does not, how to invite and remove members, and how it meets the organization role.