CDISA9009E

The LDAP group object is required when LDAP group search is specified.

The LDAP group object is required because you specified a value for the LDAP group search.
Specify a value for the LDAP group object and try the request again.