- a group within our company LDAP contains members and submembers --> also the submember attributes need to be check for the LDAP group synchronization