I am trying to set up a self service AD group membership form/workflow where an end user can see what security groups they belong to and submit a request to be added or removed from a group. The part where I am having issues is finding a way for the end user to be able to see all the security groups they already belong to. I assume that I could just query LDAP to get the group memberships, store it in a variable, and then present that to the end user. But for some reason I can't get the WF action to work correctly. Could someone help walk me through how I would set the query LDAP function?