diff --git a/pkg/connector/group.go b/pkg/connector/group.go
index 6423c90..5a65f3a 100644
--- a/pkg/connector/group.go
+++ b/pkg/connector/group.go
@@ -129,6 +129,7 @@ func (g *groupResourceType) Entitlements(ctx context.Context, resource *v2.Resou
 	return rv, "", nil, nil
 }
 
+// newGrantFromDN - create a `Grant` from a given group and user distinguished name.
 func newGrantFromDN(resource *v2.Resource, userDN string) *v2.Grant {
 	g := grant.NewGrant(
 		// remove group profile from grant so we're not saving all group memberships in every grant