Windows AD / Group / Role - Does it work?

Hi

Has anybody had success granting the Admin role to a Group using the Windows AD authority?

I can add a group and grant it the role and then log in to Unisphere (if I am a member of that group) but then can't do anything once I am logged in.

If I add myself as a user and grant myself the Admin role I can administer as I would expect to be able to. I would rather not have to do this and manage it from an AD group if possible (security audit and all that - need to add about a dozen users to three systems and then ensure that new users are added and others removed as and when...)

Looking at Unisphere v1.6.2.4 if that makes any difference.

Thanks in advance