It seems like one organization being able to specify a relationship with another, possibly with the ability to set a list of approved permissions, would solve this.