We're using G Suite group based syncing, and what I'd like to be able to do is to define multiple groups in Google each of which specifies access to a different Atlassian application, so that the app permissions could be driven from our central user admin in G Suite.