Re: social media data hoovering is an obvious security risk
"I dont think you can manage it with a couple of A.D. groups."
I can't speak for the military, but I do have direct knowledge of how at least one large organization deals with this.
Of course, there are some organizations who can't see the AD forest for the trees. ;) (Sorry, couldn't help it)
Anyway, I've seen how many groups a large organization can have. I'm currently a direct member of over 20 groups, which expands into over 60 nested in the hierarchy. And, I assure you that there are those who do in fact determine who can have what app by AD group.