To preserve the referential integrity of group memberships in such a scenario, enable the referential identity plugin.

  • Enable the referential integrity plugin with the following command.
    bin/dsconfig set-plugin-prop --plugin-name "Referential Integrity" \
      --set enabled:true

After you enable the plugin, group memberships are preserved.