I have 3 AD groups that I want to assign varying levels of permissions within orchestrator. First will be administrators with all privileges, second will be developers with the ability to create workflows, and the third will be users who can execute existing workflows. Is there a step-by-step for defining these in orchestrator and mapping them to the associated active directory groups assuming that I'm using single sign-on server for authentication and active directory as an identity source?
