Samba-Domain is extremely lightweight, surfaces LDAP and AD, and can manage Linux and mac laptops, not just Windows. I wouldnt call it overkill.

Also, restoring single files from a snapshot is simple, I don’t get this? Lastly, of your whole data drive is one dataset in ZFS, you are ZFSing wrong.