We have working on IDM setup. There is master-replica setup on different geographical locations. On each location, we have configured idm server and its replica. The goal is to achive below 1.Domain Users should able to login to Linux clients with their Domain credentials. 2.Users can perform only specific commands, which are allowed for their projects. 3.Users can access their project applications smoothly with their domain credentials. 4.In case of any server fails/crashes, still users can perform their activities smoothly on their linux infra,
How to achieve this, Kindly share your suggestions.