I'm curious what other people's approaches have been to modelling user/account relationships. What tradeoffs have you made? How do you manage permissions?