Diagram above: Confluence connecting to an LDAP directory with permissions set to read only and local groups.