that handles authentication, but AFAIK, postgresql has no concept of Active Directory groups, only group roles defined within the postgres server. even if you're using AD for authentication, you still have to create roles in postgresql, and put these roles in groups.