CDISA9008E

The LDAP group search is required when LDAP group object is specified.

The LDAP group search is required because you specified a value for the LDAP group object.
Specify a value for the LDAP group search and try the request again.