In our organization, our users logon to their desktops with Active Directory and access SharePoint using Windows authentication. But many of our users frequently change teams, so their access to their old SharePoint team site should be removed. Our maintenance team is refusing to setup groups for each team because the maintenance project would be too big. Would ForeFront Identity Manager allow users (or supervisors) to monitor the group changes? Thanks!