Avamar web restore backup/restore role login AD Auth

We have an IDPA Appliance with Avamar at 18.1. We have configured AD Authentication and Admins can log into the console /, and web interface.

I have a need to allow end users (non admins) restore access. I created a new AD group ITS_Avamar_users, created a new LDAP Map for a Avamar domain named windows_test. I added my test account into ITS_Avamar_users, when i tried to log into the web interface i get "authentication failed" I can log into the console though. I want to grant end users (non Admins) the ability to restore from the machines they manage instead of having to call ITS. Is this possible with AD Authentication? I have done it with a local account, but we dont want to have to manage these accounts too. thank you very much for any and all info.