When LDAP membership lock is enabled application-wide AND
a group ldap sync was performed at least once following happens:

- Only admin can manually add\modify\remove members of groups
  with LDAP sync.
- Group members permissions can be modified by admin only.
- Users lose ability to invite other members\groups to projects.