Should RBAC assignments live at the tenant root or the company-level group?
I need a central place to manage both always-on and on-demand RBAC role assignments for human users. Should these assignments be created directly at the tenant root management…