@lmika I’ve been involved in a security incident where people couldn’t login anymore because of that. That solution: do some groups cleaning and split user accounts who couldn’t work without all those access rights. A nightmare if you ask me not for IT and for the affected users.