Add bots/external users to LDAP Synced Groups

Problem to solve

External users cannot be added to Groups that have been synced with LDAP

Further details

We recently had a developer leave the company, which means his account in Gitlab would be removed. He had a few impersonation tokens that we wanted to replace, but didn't want to use another employee's token as these are crucial to a group of projects' pipelines. We wanted to use a bot (external user, not in LDAP), but could not figure out how to add the user to the group since it had been synced with LDAP. We would like to be able to add an external user to groups that have been synced with LDAP.

Proposal

Create a process to add an external user to an LDAP group.

What does success look like, and how can we measure that?

External users and LDAP users should belong to a Gitlab Group

Links / references

N\A