Which group on AD referred to by LDAP mapping is OU and security group?

[#1]

Hi All,

Sorry for the rudimentary question.

Although it is as the title, when referring AD with Hadoop 's LDAP Mapping, which group is referred to OU or security group?

Thank you in advance.

[#2]

I might supplement because the way of question may not have been good.

Is Sentry assigning role to the group on AD is OU or security group?

That is the intention of the question.