It turns out I have a few assumptions on the way things work that are not in line...
Thanks for your extensive answer!
I am writing unit tests for an ldap integration module. When the groups are synchronized...