I guess in common with many LDAP users, we use a lot of dynamic grouping and roles for handling groups of LDAP users, and Atlassian user currently doesn't support this. We could create an LDAP group, grant it authorisation in Confluence, then add all our LDAP users to that group. However, the people who manage Confluence do not entirely map onto the people who manage our LDAP servers. It would be useful if one could choose for LDAP users to be automatically added to a pre-determined database group (such as confluence-users).