For groups (and eventually orgs), we probably should add some settings:

• some property likeunmanaged_members = true to avoid management of users (aka. only update the org properties not members)
• some property likeno_remove_members = true to avoid removing missing members

Terraform doesn't allow providers to modify configured values. For a user to setunmanaged_members totrue, they would also need to setmembers tonull or an empty list (we'll go with null). We can reasonably implement this, but I don't think we need the field for it, setting members to null can just make members not be managed.

For the same reason, implementing ano_remove_members would be messy, as it would require us to store some hidden state separate from the configurablemembers keeping track of all members that the resource has seen throughout it's lifetime. Is this worth it?