Hi @Simon Evans yes sir you can base your permission schemes on AD or LDAP groups. It is recommended as a best practice not to add these groups to user roles within projects but for base permissions it can certainly be done. A caveat to all this is that it can become confusing over time as to who can access what and where and when.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.