[icansearch]

I wouldn't want HR in charge of my secrets management in any way shape or form.

Happy to have a level of group synchronisation out of HR's systems, but certainly would not give them the ability to manage the high-power users.

[robertlagrant]

HR might be a more suitable place to decide who is in what role than IT is, though?