Hello, I am currently trying to affect a group to an identity manually when affecting the role Active Directory. Is there a best practice to do so ? Thanks