Update on this:
In one of two environments, I was able to add the desired group when a system administrator searched with his account. It was recommended that I add 'AD DS and AD LDS Tools' feature/ role. Ironically the environment in which I was able to add a group was not the one where I added 'AD DS and AD LDS Tools'. The coworker whose account was used had the CAC requirement removed from his account.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.