Efficiently getting full organizations membership for a user

Re-analyzed current capabilities, ended up with feature-request here: