[Freeipa-users] Prevent domain-local groups from being mapped at all

Is there a way for preventing AD domain-local groups from being mapped into IPA? From time to time colleagues try to use AD groups with scope 'domain local'. Personally, I do not see a use case for these groups mapped into IPA...

Cheers, Ronald