Ldap groups and roles syncrhonization