i have a stupid question but can you check this ?

When do we need to use LDAP groups versus Tree ?

I mean : I have to built a directory service.

Should I use a tree like :

dc=fr

|_dc=enterprise

  |

  |_ou=unit_1

  | |_ cn=guy_1    

  | |_ cn=guy_2    

  | |_ cn=guy_3

  |

  |_ou=unit_2

    |_cn=guy_1

Or should I use group like :

dc=fr

|_dc=enterprise

| |

| |_ou=unit_1

| |   member : dn:cn=guy_1,ou=people,dc=enterprise,dc=fr

| |   member : dn:cn=guy_2,ou=people,dc=enterprise,dc=fr

| |   member : dn:cn=guy_3,ou=people,dc=enterprise,dc=fr

| |

| |_ou=unit_2

|   member : dn:cn=guy_1,ou=people,dc=enterprise,dc=fr

|

|_dc=people

   |_ cn: guy_1

   |_ cn: guy_2