[dev] CustomerGroup LDAP permissions