There is something broken with LDAP authentication. Users have been added to the appropriate AD group but not able to access the site. Users are needing access to the APM tool.
Release : 10.7.0
Component : APM Agents
There was a left over Active Domain group in domains.xml that was causing overwriting permissions when opening this ticket. We have resolved this.