I want to allow root roles to give permissions to admins, and if admins have those permissions, they can give certain permissions to users.

On the application, the root can do things like delete/add organizations, manage events, etc. The root can’t give full access to its capabilities, but rather only make them have some permissions. For my application, those are managing memberships/events of the organizations a user is a president of. So, admin are just regular users, but the root can make the user an admin, but only for the organizations the user is a president of (doesnt have to specifically be president), but not others they are a normal member of. Then, those admin can give the management permissions to other users.

So what I’m doing is allowing root users to give regular users a specific admin role for a certain organization, which has the capability of management of that organization, as well as granting that permission to users. The admin can only grant these capabilities to members of that organization, and a user that is granted permission by the admin cannot give permissions to other users.

After googling, I see a lot of information about creating a role system in general, rather than specifically allowing different types of users to give permissions. Thank you for any help!