I want AUTH_LDAP_USER_FLAGS_BY_GROUP to support passing only partial for example:

user is memberOf = "cn= firstName lastName, ou=department1, ou=organization1, dc=example, dc=local"

I want to pass like this:

AUTH_LDAP_USER_FLAGS_BY_GROUP  = {
 "is_active": "ou=organization1"  #by passing the OU not the CN
}

or

AUTH_LDAP_USER_FLAGS_BY_GROUP  = {
 "is_active": "cn=admin_sn" # without passing all path
}

How can I implement this?