I have CUPOS 7.x. I am integrating it with LDAP so users can search other people from AD. I have 6 departments and each department has its own OU. Under the CUPS server LDAP configuration, I can only associate one LDAP profile to each user. In this way, CUPC users can only find people in their own department but not from other departments. My All these 6 OU's are on the top of Active directory hierarchy.