How can PHP read the groups of members in win2008 domain control?

Use ldap to allow users to log in through the domain username and password, and now they can log in successfully

The original intention is to let the user read out the group he is in, and then control the permissions on the web page, but I found it. There is a lot of information, but I found that there is no directly relevant information. I am here to ask everyone for help. Thank you