If you want to use AD groups to assign permissions for ressources, you usually do it this way: Bind permissions to local groups Nest global...