Life saver!
In short, this project was to overcome some tech debt. All my orgs browsers were not sorted, they all existed in one single OU called "managed browsers." I wasn't able to govern browsers easily. I was able to print a list of my users and job titles, then printed a list of all the browsers - then concatenate and vlookup, to arrange my users/jobtitles/browsers and basically duplicated my org's users OU's to the browser OU's and kept everything aligned with the user names/jobtitles.
Now I can allow extensions for some, and block for others. This will also help with reporting, now I just need to figure out how to get this tied into onboarding automations
:)