I have a custom LDAP group defined as a userManager defaultGroup instead of the default “members” group. I was expecting my custom group to be given Read access by default on DomainRoot just like it is done for the “members” group. This does not appear to be the case. Instead I must manually add this Read ACE to the DomainRoot. Is this a bug? Shouldn't the userManager defaultGroup declaration trigger this behavior just like is done for the “members” group?