Domain rule for organizations feature

I’ll explain the use case. I want to have organizations with specific members in each connecting with their social account, but I want our internal support engineers to access ALL organizations. Instead of having them enrolled as members to each organization, I would like a rule to cover current and future organizations.

This seems impossible with auto membership disabled.

Is there a way to access the list of members from within a rule so I can write my own whitelist logic for a domain OR membership (and allow auto membership I presume)