A sort-of related question, can we create "global" relationships? Ie all our applications would be using the group memberships but then provide the mapping from those to application specific roles. If I understand it correctly (which I very much may not) relationships are specific to the namespace/schema?