Hello: I'm trying to figure out if it is possible to provision User-Role mapping to ABAP system based on Active Directory. It is clear Active Directory can be used as a leading user store. What is not clear from the documentation is whether AD can be used as a repository for ABAP roles as well. Would like to know if there is a native integration between ABAP and AD whereby not only users but user-role mapping can be provisioned. In AS Java this is accomplished by mapping AD groups to Java UME roles. Looking for a similar function. I realize SAP IDM and Access Control (GRC) can be used as provisioning engines but want to try the AD approach. Any suggestions would be appreciated.