Currently DPA only supports AD by importing AD groups. It would be useful to also allow adding specific AD users to have access to DPA.