Add ability for a user to create a PTS group automatically based on the membership of an LDAP group. The PTS group may or may not remain synchronized with the LDAP group, depending on how this is implemented; if the PTS group does not remain automatically synchronized, an option should be available to allow the user to re-synchronize them.