By default when a user gets invited to an organisation they will not have any permissions, they will still be able to accept the invite and access the organisation. An organisation admin is able to add permissions for a user once they have been created and the invitation sent.
