Use new AD group for authorization