Only for LDAP groups, not for all