In large organizations, managing user permissions effectively is crucial. Currently, organization admins can add users synced from an identity provider to local groups, which can inadvertently alter product permissions. This flexibility, while useful, can lead to unintended access changes, especially in environments with numerous admins.

Recommendation: Introduce an organization-level setting that restricts synced users from being added to local groups. This feature would empower organizations to maintain consistent permission structures by relying solely on synced groups for access and permissions.