Organizations allow you to:
Logically and securely manage user accounts and administrators
Limit access to resources, applications, roles, and other Identity Manager objects
By creating organizations and assigning users to various locations in an organizational hierarchy, you set the stage for delegated administration. Organizations that contain one or more other organizations are called parent organizations.
All Identity Manager users (including administrators) are statically assigned to one organization. Users also can be dynamically assigned to additional organizations.
Identity Manager administrators are additionally assigned to control organizations.