Make nested groups in Control
A functionality I think would assist with user management, would be allowing nested groups within Control (Security - User Sources - Internal). This would allow for breaking up individual users, similar to AD. Let's say a company or office is removed from control, nested groups would make searching for the individual users much easier and verifying all access has been removed.