Make it possible to assign organization to specific roles instead of whole roles as some customers need to strict only specific role to be assigned to a specific legal entity and other roles to all or other legal entities on the same environment. This currently causes contradiction between security roles, and it causes user to have all roles applied to all legal entities.