Shared IAM Infrastructure

Managing users separately on each system is too hard.
Simplify: manage users and groups with a shared, global infrastructure.
Continue to map groups to privileges inside each system.