As mentioned in an earlier section of this document, leverage AD groups where possible for the assignment of roles within vRealize Automation. For more granular assignment of users to roles, create one AD group to correspond with each vRealize Automation role.