Onboard users into LUSID and give them the permissions they need to perform their professional responsibilities, and no more.
You can transition LUSID to a user-based access management system if you do not need to model professional responsibilities as roles.
Control access to data stored in LUSID by writing data policies using access metadata associated with entities, as an alternative to identifiers.