Once a ldap group is mapped to Artifactory, Artifactory examines each ldap group to see if a user belongs to the group by contacting the LDAP server. Once Artifactory finds that the user belongs to the group, then it lets the user to inherit the permissions that have been given to the group by an Artifactory administrator.