I imagine this will be a common need for enterprise customers. Even if it was a service on the side that let you programmatically say "Mirror ActiveDirectory group 'foo' into spicedb", that would be huge.