# Security Group Definitions
# Processed after OUs, before user membership sync.

@(
    @{
        Name        = 'MasterAdmins'
        Path        = 'OU=ExampleAdmins,DC=example,DC=internal'
        Scope       = 'Global'
        Description = 'Master administrators - full control over all managed OUs'
        Members     = @('t0admin')
    }

    @{
        Name        = 'DelegatedAdmins'
        Path        = 'OU=ExampleAdmins,DC=example,DC=internal'
        Scope       = 'Global'
        Description = 'Delegated administrators - scoped helpdesk privileges in ExampleUsers'
        Members     = @('jsmith')
    }
)