Onboard users into LUSID and give them the permissions they need to perform their professional responsibilities, and no more.
You can transition LUSID to a user-based access management system if you do not need to model professional responsibilities as roles.