When a user is created by LDAP, it do not have any access rights, so is necessary to grant permits in CA PPM directly. Is There any way to grant permits by LDAP directly?
I don't think that is possible. The LDAP jobs do not deal with access rights..
I can also confirm that you cannot assign PPM related Access Rights through LDAP.
I will suggest some sync job which can take care of basic access along with other groups based on some logic.