We got bit (again) by the weird limitation that feature flags are either env or user overridden. When releasing features a standard process is to:

• override in a dev or staging environment for a small set of users, test
• do similar with some production cohort
• <i>override entire development/staging environment for soak/other testing</i>
• propage to production

The problem is that feature flags are either env or user, there's no hierarchy of org > env > user (least to most specific).

Also as developers set feature flag defaults it's easy to be in an environment and think you're only effecting it (there is some small text to indicate it is a global change).

What is the suggested approach to rolling out an environmental default while still allowing user overrides?