2.8. Check Group Membership on the Account, Not the Group
If you need to determine which groups an account belongs to, request
isMemberOf
for example with OpenDJ when you read the
account entry. Other directory servers use other names for this attribute
that identifies the groups to which an account belongs.