I wrote something 
<a href="http://forums.otterhub.org/viewtopic.php?f=53&amp;t=16398&amp;p=63133">http://forums.otterhub.org/viewtopic.php?f=53&amp;t=16398&amp;p=63133</a> regarding using default services plus ACL to assign a service to all the users in a large company.<div>
<br></div><div>I haven&#39;t tried it, but it seems to make sense at first glance.</div><div><br></div><div>The concept is:</div><div><ul><li>Make Customer-Specific-Services</li><li>Make an ACL that restricts the services to a CustomerID (Possible)</li>
<li>Make an ACL that restricts the services from everyone else (PossibleNot)</li><li>Set the Customer-Specific-Services as default</li></ul><div>The caveat is, more or less, exact spelling, and making sure that all customer-specific services are in the PossibleNot ACL. </div>
</div><div>This would help prevent a great Cartesian mess of PossibleNots per Customer ACL.</div><div><br></div><div>I&#39;d appreciate any feedback, ideas, etc.</div><div><br></div>