As administrator I do not want to manually update membership of users based on some attribute, when this attribute changes - e.g. in user-mod operation. Or run a hacky cron-job based solution. I want the user to be automatically added to groups based on automember rules and removed from previous groups if they no longer match automember rules.

The general use-case is:

• Automember groups are created to match manager, team name, cost center, etc.
• Application access roles are then tied to the relevant automember groups
• As people move around internally (which happens a lot), access is automatically updated-- adding and removing users as necessary
• Group can be marked as managed exclusively by automember inclusions/exclusions