Managing LDAP User permissions

[sbob <sbob@xxxxxxxxxxxxxxxxxxxxx>]

All;


I know from the docs I can deploy LDAP authentication, one we do this 
how do we manage permissions within the database foe various LDAP users? 
Can I setup automatic permissions based on LDAP groups?

Can we ensure that if an employee leaves then these permissions are 
automatically removed?


Is there a best practice for this?


Thanks in advance