Define a hybrid group management strategy for security and governance. Plan for self-service or IT-led group management with oversight. Provision groups with their lifecycle in mind, including owners, location, and department. Use dynamic groups or automation to periodically review membership and usage, and archive unused groups to support a zero-trust security policy.