Organisation administrator assigning permissions

When creating or editing a user, an Organisation Administrator
can only see Applications listed that they have access to and
have delegatable "signin" permission.

An Organisation Administrator can only give permissions that
they have themselves and are marked delegatable.