By default, LimaCharlie is multi-tenant. Tenants are called Organizations, and both data and billing are tied to the Organization. Users, API Keys, and Groups are ways of managing access and permissions to Organizations.
Users are operators or administrators. Permissions are applied directly to the User account and allow for fine-grained access control.
One user can be a member of multiple organizations.
An API Key represents a set of permissions and are used to interact with LimaCharlie.
Full documentation on API Keys can be here.
Groups provides a way for managing permissions for multiple Users across multiple Organizations.
Groups each have a set of permissions associated with them that are applied (additively) to all Users in the group, for all Organizations in the group. Groups drastically reduce the admin overhead in managing fine-grained access control.
More information here.