Subusers or Groups

I want to extend the keycloak system in following way.
A User (Company) is registering to the system. Normally this is a company, that we have to verify manually.
When everything is ok, this User should be able to invite or add/delete/manage/Lock users to his “Company” account.
The question is, could this be managed by using the groups or are there other possibilities to manage this, so every time I create a “Company” I have to create also a group.
One issue is, if the “Company” is locked, all users attached to this account must also be lockeed.
Many thanks