Using Amazon IAM, can I give permission based on organizational groups?

Using Amazon IAM, can I give permission based on organizational groups?

A.
Yes but only in certain cases

B.
No

C.
Yes always