Dataverse security restructure: lessons we wish we'd applied sooner

Dataverse gives you three access-control primitives that combine into a permission model: business units (BUs), security roles, and teams. On paper they are simple. In practice, every project that run