Problem Definition

Admins of large orgs would like to simplify granting permissions to content when new LDAP groups are added. Currently, admins must manually add each group to the Global and Space permissions.

Suggested Solution

Allow LDAP groups, including from different LDAPs, to be added to a local group. This group otherwise functions as normal, so it can be added to global and space permissions.

Other notes

CONFSERVER-52240: Have the equivalent of Project Roles in Confluence was closed as part of implementing CONFSERVER-5302: User management delegation to Space Admins. However this doesn't include Global Permissions management and enterprises with large environments should have the option to keep managing Space and Global permissions at a System Admin level.