I see what you mean with the LDAP settings...

Splitting out the CUD stuff does make sense to me though.