Admins on Team and Enterprise plans can now invite organization members with the No access role directly from the invite flow and can switch an existing member to it. Previously, the lowest available organization role was Read-only, which still granted visibility into every project in the organization.
With No access, new members start with no project access; admins grant access to individual projects as needed. No access can only be assigned at the organization level, not per project, so project access is still layered on top of it one project at a time.
Members with the No access role now also show up in the organization's member list - they were previously filtered out.
See Access control for the full set of organization and project roles.