We're trying to implement active directory groups for Jira roles and permissions. Can you please let me know your experiences and best practices? For example how many groups do you have in active directory(jira-administrators, jira-projectleads, jira-users,etc..?)