added support for ad groups user belongs to.