The settings that belong to the person, not the organisation. Profile details, sign-in security, and which emails the person wants to receive — all editable independently of which organisations they're a member of.