Question:
How to add groups to assign pipeline permissions to sets of users in an environment where the Control Hub is enabled with LDAP?
Answer:
When LDAP is enabled, assigning groups to users is not something that can be managed via SCH due to the nature of the SCH-LDAP integration in an on-prem installation. You could have a better understanding by referring to the following documentation sections. When using LDAP, we assume that user wants to use LDAP as a central place for keeping groups across the organization and all the different applications. Hence, we don't allow such changes in SCH as that would break the idea of a centralized group management.
To change Pipeline Permissions, you need to first enable permission enforcement (by default, permission enforcement is disabled for your organization), please see our documentation here. Then you should be able to add groups or users in Sharing Settings for each pipeline.