Currently, administrators can dynamicallycreate organizations via the API but can't assign groups to those organizations without usingserver flags.

This prevents fully dynamic hierarchical RBAC systems and is a blocker for some customers. We should add a new endpoint to associate these two concepts.