In real-time how users are mapped to roles, groups and subgroups, say a user has a role of Manager and he belongs to say consulting group and he is also part of other subgroups too with a limited privilege, so if have any other practical exposure in handling complex users, groups, role and sub groups please share...