I setup a new 7.6 vRA and vRO environment to migrate from 7.3.1. I synced my users and groups using IWA from my AD domains. I created a custom group with my team's AD group in it. When I setup my vRO node to use vRA for authentication I specified that custom group. I thought everything was working great until I realized everyone one could do administrative tasks in the vRO and vRA consoles. When I use the vRO control center's test credentials feature, it says the user I'm testing with is not an admin, which should be true, however that user and all the others have admin access.When I mean admin access, I mean they are able to create groups and such in vRO, and also in vRA they are able to do everything.
