Update a user's name, organization access and/or group-level role. The organizations array uses replace-semantics (send the full desired set), while a field you omit is left unchanged; name each organization either by its Popp organizationId or by your own externalOrganizationId (exactly one per entry).