At the current customer, it was obviously planned some time ago already, to use dynamic roles (DynamicGroup) to assign so called birthright roles (Org) providing defaults -AD account, basic AD memberships and mailbox- to a person.
5 AD domains do exist and per domain 3 roles, having dedicated dyn. roles assigned do exist, so in total 15 birthright- and dynamic roles. Set-up/ WhereClause of the dyn roles are pretty similar, no 'like', but three custom tables are joind and ~ six conditions. In future and based on the current set-up, I would expect to have up to ~ 220.000 person assigned in role.
Additionally the ConfigParm ''QER\Structures\DynamicGroupCheck\CalculatDOeImmediatelyPerson" is enabled and value=1.
In general the dyn. assignments are a great option, but in this case I'm a bit skeptical as the client size might exceed the performant usage. I also got somehow in mind to have sth. read about limits with ~50.000 for dyn roles, but can't find it anymore, maybe I'm mistaken.
Anybody has experiences with this size of assignments, share those, DO and DON'T, ...
Thx
