A group-scoped access token does not affect LDAP users [RTFACT-27087]