Still inside the box
You're thinking like every other Windows admin out there, you're stuck in the AD way of thinking. It doesn't have to be that way. Just look at what people actually want done in the end and work back from there. It's easy if want it to be.