Currently, administrators can dynamically create organizations via the API but can't assign groups to those organizations without using server flags.

This prevents fully dynamic hierarchical RBAC systems and is a blocker for some customers. We should add a new endpoint to associate these two concepts.