yes, so basically we have a hierarchy tree, composed of Organizations. Those organizations then have Entities, and the entities then have various resources. Users have permissions on those organizations, and the top organization is ours, so an user with perms on the top org, would have superadmin perms. Organizations and entities shouldn't be created or moved very often, so relationships with them should not change much.