Is your feature request related to a problem? Please describe.
As a difference to Admin Console sync, there is no debug log output on what accounts are used as input and what group should be resolved for them.
This would help to troubleshoot LDAP extraction related issues / group resolving issues.
Describe the solution you'd like
show a dir with email of the account as input and if possible its ID, then a 'groups' statement that picks a list as value which should contain all groups where the user should be a member in Sign.
Describe alternatives you've considered
there are none outside of building custom USTs
Additional context
this helps both Customers and Adobe support in troubleshooting Sign sync built on v2.11 base