Is there any best practice information on when to and not to use Role-Based
Entitlements?

Somewhat related, does a query generated when using RBEs (LDAP query) and
appropriately indexed attributes act differently or less efficiently than
when you put that same logic into driver policies?

I'm working on a 250,000+ user tree and we have some multi-dimensional query
criterion and I'm just looking for the best approach to derive membership.
I love using RBEs but I'm not sure that is recommended in a tree of this
size or not.

Thanks in advance!!

--
Troy Moreland
Identity Automation, LP