Auto-approval scenarios for LDAP users

The following auto-approval scenarios apply to both new and existing LDAP users.

Auto-approval Flag Status New LDAP Users Existing LDAP Users
Auto-approval is set to true and the LDAP user role matches a corresponding PEM role User is logged into PEM. User is logged into PEM.
Auto-approval is set to true and there is either a role mismatch, or the LDAP role matches multiple PEM roles User is not logged into PEM. User is moved to approval pending status.
Auto-approval is set to false User is moved to approval pending status. User is moved to approval pending status.