Users should not have access to every instance if not assigned to a group.

Describe your idea. The more information you provide, the clearer picture of your idea we will have.

Current behavior is if a user is provisioned but not explicitly assigned an access group they have access to all instances.

How will this idea help you and potentially others? Understanding how things are done today, where the pain is, and how the idea is beneficial puts us in your shoes.

This is a risk area where people may inadvertently gain access to data they should not be able to see.

Who will benefit from this idea? Whether it's specific roles of users, users of a specific product, or certain departments/markets, this helps us know who to talk to when we need more information.

Customers will benefit from reduced risk of people seeing sensitive data.

How do you envision this idea being implemented at K1x? You're the expert and understanding how you see this working helps kickstart the idea.

At least have an option in the admin screen to toggle how the system behaves if a user is not part of any groups