You can map Windows Groups with VG accounts, then grant both Application and Shared Roles to these accounts.

Open the Console, right-click on the "user" icon and select "Add Windows User or Group"

Search for a Windows Group and declare it as a VG Account: you can then grant him Application and/or Shared Roles.

As a result, the daily user management is done in Active Directory, not in VG anymore.


Visual Guard