Enabling "Periodic full sync" and "Periodic changed users sync", groups are periodically synchronized in one way from LDAP and Keycloak.

As of now, there's no possibility to sync from Keycloak to LDAP. Users would need this to avoid manual sync tasks for groups from Keycloak DB to LDAP.