It would be great to add the possibility to assign organizations and locations to a foreman user group.

Current use case:
We are running a foreman which will manage up to 80 organizations and locations which will be created in an automated way using foreman ansible modules.
A user of a given organization will be created automatically via authentication source and thus will automatically receive organizations and locations assigned to the authentication source.
However there is only one authentication source, therefore all users will always receive access to all organizations and locations.
There is currently no possibility to restrict access on role level or user group level.
It can’t be restricted on user level as users are created automatically at first login and do not exist in advance, the only current work around would be to add the existing authentication source 80 times in foreman trying to use ldap filters to restrict users to only one created authentication source which would be quite extensive.