I.E Create my own group, and then add the job title USGs to that?
Because when I try, I just get
"Not allowed: the group account system is read-only."
And after some looking
"Directory Server (LDAP) - Integrate with a directory server such as Active Directory or OpenLDAP using the LDAP protocol. Users and groups are stored in the directory and treated as read-only."
I'm not going to create 400 users to get this to work. Was hoping it would work on the fly from AD