// if value is non-null: we allow only plugins that have enlisted artifactId only
        // ---
        // end game is: settings enlisted groupIds are obeying order and are "free for all" (artifactId)
        // while POM enlisted plugins coming from non-enlisted settings groupIds (ie conflict of prefixes)
        // will prevail/win.
        LinkedHashMap<String, Set<String>> candidates = Stream.of(build, management)

     * @param initialRoles The initial role list to be updated.
     * @param groupIds The list of group IDs to lookup parent groups for.
     */
    protected void scheduleParentGroupLookup(final EntraIdUser user, final List<String> initialGroups, final List<String> initialRoles,
            final List<String> groupIds) {
        if (logger.isDebugEnabled()) {