then lookup all resources where is_private_under i...
# spicedb
j
then lookup all resources where is_private_under is organization