Our ActiveDirectory contains an correct memberOf-attribut for each entry, that defines the membership of an object in a group. Making it possible to use that attribute, group-membership could be resolved faster for a special user.

Perhaps it could be useful with further integration of nested groups.