Is it possible to use "AD Security Groups", similar to "AD Users", to define "user access & roles"? This would be great for us, since we have a large organisation with a lot of different departments which are accountable for their own assets. The p...