LSST IaM Group Naming Convention

LSST can enforce data access rights through group membership.  Furthermore, LSST intends to enforce L3 data access rights through group membership.  Since we intend on using LSST groups membership to determine data access rights and access to other LSST resources and services, a group naming convention must be established.

Since we intend on enforcing access, data rights, etc. through group membership it would be prudent to have a group naming policy that reflects LSST's information classification policy and account roles within the organization.

The proposed group naming policy:

https://confluence.lsstcorp.org/display/LAAIM/LSST+IaM+Group+Naming+and+Auditing+Policy