Updated for RM API changes -> group_memberships are no longer checked for OUs. 'Organizations' is the proper key.