...
Groups of administrators can be assigned to an administrator account by selecting Import Admin Users from the LDAP Connection dialog. That account will link the admin profile to that permission for administration. It is recommended that for these types of accounts you name them differently than your standard user base to support the integration.
For this section to allow the login from this group, you must have the Web Login Enabled box checked on the configuration Active Directory Configuration page.
...
Mapping Access Group Field to Physical Access Group
The Primis system will pull into the attribute list a list of all possible attributes that are currently loaded within active directory. On every card scan, Primis will ask active directory if the user has the variable that is selected.
User Access Groups
The user User access group groups can be linked to AD OUsGroups, Groups or Access Linked AD attributesOU’s and/or Attributes.
...
Attribute Based Access Control Use Cases
...