Maps an Active Directory (AD) group to a device role.
Global configuration mode
Enter no ldap-server maprolegroup group_name without the role role_name parameter to remove the mapping of the AD group to a role.
To map the AD group "Administrator" to the device role "admin":
device(config)# ldap-server maprole group Administrator role admin
To remove the mapping:
device(config)# no ldap-server maprole group Administrator