Hello
I am working on deploying a custom app via the Univention App Center in a multi-domain UCS environment. 
The app requires fine-grained access to LDAP attributes but I am facing challenges in managing consistent permission behavior across different domains especially when domain controllers sync intermittently / are not always online. 
Has anyone implemented a way to dynamically adjust / sync app permissions (e.g., through a pre/post installation script or policy hook)? 
I am trying to avoid hardcoding anything that might break under variable domain trust or sync latency.
I have checked App Tutorial guide related to this . Also I came across the term what is alteryx while working on this & wanted to understand if it’s relevant here.
Also; if there’s a guide or official best practices for app permission handling in multi-domain setups, I would appreciate it. So far; I have only found general packaging docs.
Thank you !!