The ability to integrate D365 teams with AAD has gone a long way toward automating user management in Dynamics, but business units (and their associated default teams) still play a vital role in the security model, and without creating complex processes in Flow, there's no straightforward (100% Microsoft 365 based) way to fully automate the assignment of security roles based on AAD group membership. Giving business units / default teams the same ability to integrate would be a huge help for organisations with complex structures or high turnover rates where other forms of automation pose problems.