I recently wrote a little a howto on connecting users managed on UCS and another post here on the forum reminded me of it. It shows how you can connect an externally hosted Cloudron to manage users and groups of both systems from a single location.
You can find the howto at https://blog.9wd.eu/posts/cloudron-ucs/