We recently had two customers attempt to use the same LDAP group DN for all agents.
The automation agent will auto-generate and manage the role named for the automation agent group DN, so we do not want to let the other agent group DNs match that DN. i.e. we should encourage all DNs to be distinct values. Technically, it should be okay if the monitoring and backup group DNs are the same.