Context:
In order to allow easier testing of definitions authorizations the data generation should grant different authorizations to different users as well as groups.
Further generated users should get assigned groups (preferably in a consistent way). And certain groups or users should get assigned to specific tenant subsets only.

AT:

• TBD