When users login through ldap for the first time, an account is automatically created and the user is added to a user group to get permissions.
An admin has to add the user to some locations / organizations before they can see any objects.

We should add the possibility to define the taxonomy on a user group level as well and pass these settings on to the users in that group.