I can see why user management is out of scope, however both users and groups are realised in the datamodel in alfresco and can be used when setting up associations to content. Why I'm asking is beause we are currently developing an external application which communicate with Alfresco. In this application one example is that you should be able to see details about checked out files (not just your own) and then get the full name and certain contact details of a user, not just the username stored in the checkedOutBy attribute on the content. LDAP can in this case to populate the user data in Alfresco (including full name and email).
Another query I could think of is to query all files that are associated to a certain group. Yes this is doable by inventing a field in your datamodel holding the name of the group, but it would be more nice and clean using associations.
