When a REST resource type is set to create new entries using an RDN attribute other than entryUUID, referential integrity issues can result when the entry's RDN attribute is edited. To preserve the referential integrity of group memberships in such a scenario, enable the referential integrity plugin, as follows:

bin/dsconfig set-plugin-prop --plugin-name "Referential Integrity" \
  --set enabled:true

After the plugin is enabled, group memberships are preserved.