add LDAP_USER_FLAG_BY_GROUP for board members