Skip to content

PATTERN Cited by 1 source

Tiered override via group membership

Problem

Per-user quota values that float to arbitrary numbers become opaque — no one can quickly answer "who has elevated limits and by how much?" Auditing requires scanning every user's configuration individually.

Solution

Replace arbitrary per-user limit values with a small set of fixed tiers, each implemented as a gateway group. Tier promotion = adding the user to the higher tier's group. A group listing immediately answers who is above default and by how much.

Structure

Tier 0 (base)     ──  default group (everyone starts here)
Tier 1 (1 ack)    ──  daily-tier-1 group
Tier 2 (2 acks)   ──  daily-tier-2 group
...
Monthly Tier A    ──  monthly-2x group (manager-approved)
Monthly Tier B    ──  monthly-5x group (skip-level-approved)
Monthly Tier C    ──  monthly-unlimited group (rare)

Promotion mechanisms: - Daily tiers: automated on self-serve acknowledgment + proactive scheduled job. - Monthly tiers: manual via manager approval; time-scoped to project; auto-revert at expiry.

Key design choices

  • Coarse steps force real conversations. Instead of infinite small bumps nobody reviews, a jump from base to 5× triggers a meaningful discussion about the spend's business justification.
  • Legibility. A group listing answers the audit question instantly — no per-user database scan.
  • Time-scoped monthly tiers. A one-month project doesn't become a permanent entitlement. Duration is explicit at approval time (1/3/6 months), then reverts automatically.
  • Coupled scaling. When monthly tier rises, daily increment scales proportionally, keeping the runaway guard calibrated.

Consequences

  • Positive: System remains auditable and legible at scale. Prevents limit creep (temporary entitlements don't persist). Simplifies the policy surface to a few well-understood tiers.
  • Negative: Less granular than arbitrary per-user values. Some users may feel forced into the next coarse tier when they need slightly more. Group management infrastructure required.

Known uses

Seen in

Last updated · 602 distilled / 1,824 read