Would like the ability to create a "Golden Tenant" configuration (Maybe referenced by a CIS baseline) then the ability to apply this golden tenant template/s across a variety of client environments as need or grouped. Configuration drift could be monitored based on these top-level settings.