Organization Units (OU) are used to hierarchically group users and entities. Then you can connect users, roles, or entities based on their OUs. Admins, Service, and Super Users are now appropriately excluded from the rights assigned to Organizational Units, streamlining role-based access controls.
Here, you can manage OUs (create, edit, delete, move), members of organization units (add/remove), and roles of organization units. When a role is added to an organization unit, all members of that organization unit are granted the permissions of the role. In that way, you can easily assign a role to all of the users of an organization unit.