This is particularly true when migrating v1.x to 2.x but it may apply to other migrations as well.

We ignore groups that already exist in IPA when migrating, but since the same groups appear in both this can cause some problems (admins, editors and ipausers).

For example, if ipausers is GID 1002 in the v1 system and users are a member of it (as their primary GID, for example) then they will belong to an unknown group.

When migrating users we may want an option to reset the default GID to the private group too.