title: How to manage Jenkins project's authorization using Active Directory users and groups?
body: <p>I have Jenkins installed plus the Active Directory plugin. I can succesfully log in with domain accounts and I have set 'Domain Admins' to have full control over Jenkins. I would like to remove some overhead managing who can access which projects and delegate this to projects managers.</p>
  
  <p>I was planning on doing this by creating project bases AD groups and make the project manager the owner of this group. Then I would create an Exchange distribution group based on that AD group. This way the project manager can define who is a member of this group through Outlook or Outlook Web Access just by removing/adding people to the mailing list</p>
  
  <p>I am trying to find where to set the authorized AD group to a Jenkins project, but there seems to be no such option. Do I need some special plugins or where can I set the AD group that can access a project?</p>
  
  <p>Finally I would do an admin Jenkins job that would create an AD group under OU=Projects,CN=ProjectX. Make some user own it and then create a Jenkins project with the freshly created group and project name data.</p>