cn=tenant-a,ou=groups,dc=example,dc=org
objectclass: groupofnames
member: uid=user-a,ou=people,dc=example,dc=org
member: uid=user-b,ou=people,dc=example,dc=org
member: uid=user-c,ou=people,dc=example,dc=org

cn=netadmin,cn=tenant-a,ou=groups,dc=example,dc=org
objectclass: role
roleoccupant: uid=user-a,ou=people,dc=example,dc=org

cn=sysadmin,cn=tenant-a,ou=groups,dc=example,dc=org
objectclass: role
roleoccupant: uid=user-b,ou=people,dc=example,dc=org

cn=default-tenant,cn=tenant-a,ou=groups,dc=example,dc=org
objectclass: role
roleoccupant: uid=user-c,ou=people,dc=example,dc=org