User Story 1:

As an administrator I migrated from different NIS environments to a single IdM environment. I want to flatten my user and group namespaces but it takes years to fine all the UIDs and GIDs on different filers and make things correct. While I am definitely working towards flat environment I need an interim state where I can create groups that have same name but different GIDs and make sure that clients from that environment see one of the groups with a specific GID. That would allow me to mimic my old NIS server for the clients. This approach allows for a slow transition towards IPA technologies.

User Story 2:

As an administrator I want to have different environments dev-test-prod. I want to be able to use same group names across the environments but I want to make sure they have different GUIDs in different environments to better define access control for those environments. It is similar to the request to use UIDs or SSH keys for users in different environments.