I know that it was a political decision not to copy all Groups from one to another user, but this seems not to be rational to me.
It would be great if that was in our own responsibility. If the follower of an employee arrives, we have to copy all permissions and groups to this person.
Now i have to look what Goups the employee is and than put them one by one to the follower, that is miles away from automation.
Please built in a follower or a copy function for permissions. A workflow with a checking window after that, would meet the specification for nonoverprovisioning.