CloudBreak 2.7 ldap admin group

[#1]

Hi,
So in ldap configuration in CB 2.7.1, you can specify an admin group. What does it do and what format should it be? just a group name, or full distinguished name?
My problem is, that if I enable SSO in cloudbreak, I'm not able to login to Ranger od Ambari as administrator. How can I make sure, that some of my AD users can access admin area?

[#2]

@Jakub Igla

This means that the members of this groups should receive implicit admin permissions when logged in to Ambari. It is just a simple group name, e.g. "cloudbreak"

Hope this helps!