Trying to understand both purpose and "order of operations" here.
When adding users to business groups:
1) I cannot reference a group in my identity source (AD)
When adding users to entitlements:
1) I cannot reference a group in my identity source (AD)
2) I cannot reference a user not defined in the business unit selected.
Further, under the Administration tab, the "groups" here assign roles to additional users, do these play into either of the above?