We cannot apply AzureAD/O365 entitlements to users as a birthright, because AzureAD Sync has not yet created their accountsIf we instead use Saviynt to deploy AzureAD accounts, but we need to synchronize other AD attributes using AADSync (group membe...