to be clear,

entity1

and

entity2

are owned by us, but our customers can define their own teams. Each team can have access to either a "category" or "type" (e.g "all recruitments within the company"), or an individual entity ("recruitment 42"), so that's what I'm trying to represent; the ability to have access to "all recruitments"