A cso_admin should only be able to see his own organization.