@adriatic exceed the scope of the goal of this post a little bit 
but I do see the link for you with regards of RBAC + SSO and IAM. The migration topic I think requires a much larger discussion itself so I don’t want to muddy the waters of this discussion. But thank you for the feedback @adriatic I do always love getting your point of view 
For the migration topic, lets keep that in: Database Migration / Deployment Questions - #4 by bykof