The name of the AD group to map. Must match the actual group's name. Case insensitive.
The same group may occur multiple times if you need to assign both role and functions to its members.
Role to give members of this group. If a user belongs to multiple groups he gets the one with the lowest sort order.
A user must always be assigned at least one role to be able to log in, even if you also use functions.
Function to assign members of this group.
Any previous function mappings are deleted each time a user logs in.