Most Dataverse security models start with three roles and one business unit and are fine. The ones that hurt grew organically into fourteen custom roles, seven business units, and nested teams nobody can explain. Here is the restructure pattern we no