See so many hybrid deployments. If you don't have good separation of duties things get easily borked with Entra Connect If you give a group broad memb

See so many hybrid deployments. If you don't have good separation of duties things get easily borked with Entra Connect

If you give a group broad membership in Entra ID or don't disable sync I see things break sometimes

Least that's my guess, not an expert