View groups for an LDAP user. Both LDAP and non-LDAP groups are listed (nice!). Only the non-LDAP groups can be added/removed (good). Remove any or all of the non-LDAP groups. UI shows the groups removed. Go back to viewing the user. Removed groups are back!!! Repeat process, same result. Same if I use remote API to remove the group. I would appreciate a work around at least. Thanks.