I am creating a web site in which users can be authenticated to vsphere client from Windows Active Directory Server for any operations needed. But for it to function I am trying to find api's to fetch permissions or roles that we can dynamically apply to that new user created in AD from my site. But after searching over a day, I am unable to find any api's or endpoints to deal with these tasks of updating permissions of AD user through api. I also read about vRealise automation as they ways to deal with Identity source users and their permissions but it is not free.
Any help would be appreciated ?