Presently an AD security group can be added to DPA with shared permissions for all accounts that are members of that group. This limits the ability to present and alter individuals permissions.
A workaround is to create AD security groups for each combination of permissions and add AD users to these groups.
I would prefer to add individual AD users to DPA, permitting per user permission control and allowing the user to leverage their AD account for username/password authentication to DPA.
