We also used AD groups in this implementation. The system is set up in such a way that any approach is possible. It can grow or shrink as needs arise.

Thanks for the feedback.

Andre