Parent/Child Relationships in Groups are Backwards

[shawnweeks]

I'm trying to figure out how to nest groups in Authentik and it seems to behave the exact opposite of Active Directory and FreeIPA. Consider a group called "Global Admin" that has multiple app specific groups as children ie "App 1 Admin", "App 2 Admin", etc. In other systems if a user is a member of the parent group then they are automatically members of all the child groups but in Authentik per the documentation each member of the child group is automatically a member of the parent. How are you supposed to model groups like I've described in Authentik and then access that information in LDAP? This seems like a pretty common use case but I can't figure out how to do it.