What is available at the moment in Marketplace, related to that sort of scenario:
- Security Audit Reports will produce business-friendly reports about security assignments.
- Application Control Manager allows organizations to formalize the process of security management, tracking add/update/delete requests for users and groups and processing them through an approval chain.
- User Management Console allows admins to create users and groups directly in Azure Active Directory, copying assignments from pre-existing ones.
- Provision Request Manager allows Onestream apps to pull provisioning requests from an external db table, which can be then be managed with external tools to queue up requests.
- XML Security Remover strips security from application files. It works with the Load/Extract pattern you mentioned, I included it here only as something you could maybe "borrow" some code from.
The process you describe sounds like something that maybe could be filed as a request in the IdeaStream section dedicated to Marketplace, feel free to do it there: https://community.onestreamsoftware.com/t5/MarketPlace/idb-p/MarketPlaceCoreIdeas
There are some utilities that consultants built over the years, "floating" around. The closest I've seen is one that allowed you to export security groups as csv and reimport them in the same format, replacing everything that was there before; it was meant for development, sounds a bit too dangerous to use in production settings.
