organization and username should be passed