How to model Amplify GraphQL permissions so that a user can only update records belonging to their Organisation

Question

In AWS Amplify schema.graphql what would be a good approach to model the following...

I have multiple Organisations with Staff Members that I want to list/update customer