1) We deploy a custom group for each set of user privileges we wish to manage. 2) These groups define the scope of responsibility of the automation, leaving
other system users alone if they're not members of any of these groups.
3) It is the automation's job to bring the target in sync with defined intent,
while not over-stepping its scope.
High level concepts here:
1) We deploy a custom group for each set of user privileges we wish to manage. 2) These groups define the scope of responsibility of the automation, leaving other system users alone if they're not members of any of these groups. 3) It is the automation's job to bring the target in sync with defined intent, while not over-stepping its scope.