All, I'm running into some concerns with our current layout of Reservations and Business Groups and want to know how others in IT are doing this. Currently, our Business Groups are aligned with teams in our organization. Let's call that team Engineering for the sake of discussion. The "Engineering" Business Group would use the "Engineering" Reservation. There are also a few other BG's and respective Reservations. The big reason for this layout was that some teams need to only see some Services, whereas other teams only see one for example. As I understand it, the only way to enforce that line of security is via Business Groups and what Services they're entitled to see and use.
Is anyone using a separate model where you have one Reservation/Business Group per datacenter (or cluster)? I like the idea of managing fewer Reservations, but the side effect is there would be one Business Group that all the teams would be a part of therefor limiting what I can do with security and with who sees what.
Would love your thoughts on this, thanks!