How to establish a federated permission model in a Matrix space?

I am part of a network of local groups spread across the world. We would like to set up a private Matrix space for the members of the network. Since the local groups are the only ones who have an overview over who their members are, they should be able to add and delete their members as needed.

Does Matrix allow such a federated permission model? The closest thing that I could think if so far would be that each local group creates their own space and manages their members there. The network space would be configured to be accessible for members of all those spaces. The problem with this approach is that as far as I understand, once a member has joined the network space and some of its rooms, they will remain a member of those even if they are removed from their local group space.

Are there any suggestions how such a system could be implemented? Surely this is something that many decentralized networks and organizations are facing.