If LDAP auth is enabled, script server is taking user groups from LDAP. Additionally, admin can specify own groups in the script server. However, specifying LDAP groups in user-defined groups is ignored.
Please see comment for details: #207 (comment)