I believe the permission sync from LDAP uses them
g
I believe the permission sync from LDAP uses them