This issue affects environments that have configured a custom role under Settings > Devices & Users > General > Enrollment > Grouping > Default Role. After upgrading to AirWatch 8.4, user groups will no longer sync or add in new users to the group through LDAP. Existing users will not be removed from user groups. This issue affects both manual and automatic syncs.
Navigate to Settings > Devices & Users > General > Enrollment > Grouping and select the appropriate Default Role to resolve the issue in an affected environment.