v7.0.0 Dynamic Entity record metadata: created and updated, each with at, user_id and on_behalf_of_user_id Sync one Group member, or one user in all their Groups: v7.0.0 POST /management/groups/GROUP_ID/users/USER_ID/sync and POST /management/users/USER_ID/sync-groups (dry_run=true supported). Client IP Address: X-Forwarded-For read from the right against trust.proxy.peers (first address not trusted is the client) Role granted emails go through the message outbox: queued (outbox_type EMAIL, subject_id = entitlement_id) - #2927