I know how to delegate group membership management on an OU (Group Objects>Read+Write Group Members), but I can't find "Write Primary Group ID" in the Computers, Users, or Groups under ...

I'm trying to move over our VPN auth to use AD auth and this has me scratching my head. Everything works but trying to limit access based on AD group membership. I've set up the attribute map below.

On the surface, Active Directory groups are a simple and straightforward way to manage identities (users and/or computers) and assign permissions. Users or computers are added as group members, and ...