Mapping Roles to AD Groups
DreamFactory 2.0 allows mapping your Roles imported from your Active Directory server ([Importing Groups as Roles](Importing_Groups_as_Roles)) to your users (per-application) authenticating using DreamFactory Active Directory service.
To enable mapping DreamFactory Roles to Active Directory groups check off 'Map Group to Role' checkbox on your Active Directory service config tab.
When this checkbox is checked, DreamFactory will try to match an existing role (imported from Active Directory) with your AD user's primary group. If no match is found using primary group, then it will try to match with any other group in Active Directory. If still not match is found then it will use the default role specified on your Active Directory service configuration.