RSA auth using AD groups

[hostname_]

Reading up on RSA enabled authentication realms.  All the guides I have looked at have you set the authentication to * and USER.  How can I have the Juniper query an AD group for membership, and then set policies based on this when using an ACE server?

Thnx

[jayLaiz_]

under the user realms,general, set authentication to RSA and directory/attribute to AD server.

Do role mapping based on AD group membership.

Regards,

Jay