• With our organisation, we're investigating if we can replace global groups with system roles, what are the pro's / con's?

    In our organisation, we're using the AGDLP principle with system roles and business roles:

    Account -> Business Role -> System Role -> Global Group -> Domain Local Group (with resource / permission).
    Where a System Role can have multiple…