Correctly assigning user roles and groups for multiple organizations

Question

So i\'m new to AWS and trying to figure out the best way to implement User/Group IAM for my amplify application. Just to give some insight, imagine I am making a service that al