You can connect a team to an Azure AD security group. This has many advantages for user management, as the membership of a team in the CDS is managed by the Azure AD group membership.
Azure AD security groups operate like owner teams; they can have security roles applied and can own records.
You can use Azure AD security group teams to manage app and data access.
The security model is based on the business unit hierarchy, and although you have seen how we can bypass the hierarchy with teams, there are still business needs that require different hierarchies, which is confusingly called hierarchical security.
