Custom attributes to set on the user's org membership (attributes are org-scoped).
If the user has not signed up yet, they are stored on the org invite and applied when the invite is accepted.
Setting attributes requires permission to manage org members.