Lots of businesses exclusively use AAD (or other identity providers other than AD). When adding users to roles, redirecting tasks etc in the K2 Management site the default security label is always K2. If a user forgets to select the correct security label then they end up adding the incorrect identity (e.g. K2 instead of AAD). It would a much better user experience if the default label could be set so as to minimise this happening.