should be no different from how you manage things today. I treat \\isilon_cluster\ifs  just like you would \\server\c$.  I locked down ifs share with permissions so that only system admins can connect. From that point on in the root of \ifs i create a folder that corresponds to my cluster name (helpful for future DR/Replication), then i create a folder for each access zones (helpful for future auditing) and then underneath each zone name i create a folder for each department, remove inheritance and add AD groups per my requirements.