Group mapping centralization for virtual
You can now use virtual system User-ID hubs
to share group mapping information
to IP address-to-username mapping information, allowing you to more
consistently enforce group-based policy. Configuring a virtual system
as a hub allows you to use your multi-vsys environment to maximize
the number of available mappings for each virtual system and simplify configuration.